From 41cc06162d5fc3b8782ad709cdf331f5b812af0e Mon Sep 17 00:00:00 2001
From: xust <xushitong@uniontech.com>
Date: Wed, 14 Jan 2026 10:27:52 +0800
Subject: [PATCH] chore: enhance D-Bus service security configuration

- Remove allow own from default policy, restrict to root only
- Remove redundant interface-specific allow rules
- Simplify configuration while maintaining functionality

Log: Tighten D-Bus permissions by restricting service ownership to root user
---
 src/service/data/com.deepin.bootmaker.conf | 8 --------
 1 file changed, 8 deletions(-)

diff --git a/src/service/data/com.deepin.bootmaker.conf b/src/service/data/com.deepin.bootmaker.conf
index 88a2c0a5..57cdef74 100644
--- a/src/service/data/com.deepin.bootmaker.conf
+++ b/src/service/data/com.deepin.bootmaker.conf
@@ -12,15 +12,7 @@
 
   <!-- Allow anyone to invoke methods on the interfaces -->
   <policy context="default">
-    <allow own="com.deepin.bootmaker"/>
     <allow send_destination="com.deepin.bootmaker"/>
-
-    <allow send_destination="com.deepin.bootmaker"
-           send_interface="com.deepin.bootmaker"/>
-    <allow send_destination="com.deepin.bootmaker"
-           send_interface="org.freedesktop.DBus.Properties"/>
-    <allow send_destination="com.deepin.bootmaker"
-           send_interface="org.freedesktop.DBus.Introspectable"/>
   </policy>
 
 </busconfig>