apmanager: Grant apmanager group permission to send to org.chromium.apmanager.
Allows access control with group membership.
privetd will be put into the group in following CLs.
BUG=chromium:441172
TEST=none, only apmanager is member of the group yet.
Change-Id: I9a2eefb281de69c1d8361cf15ff966f9b3b35718
Reviewed-on: https://chromium-review.googlesource.com/234904
Tested-by: Vitaly Buka <vitalybuka@chromium.org>
Trybot-Ready: Vitaly Buka <vitalybuka@chromium.org>
Reviewed-by: Alex Vakulenko <avakulenko@chromium.org>
Commit-Queue: Vitaly Buka <vitalybuka@chromium.org>
diff --git a/dbus_permissions/org.chromium.apmanager.conf b/dbus_permissions/org.chromium.apmanager.conf
index 6035d27..540a629 100644
--- a/dbus_permissions/org.chromium.apmanager.conf
+++ b/dbus_permissions/org.chromium.apmanager.conf
@@ -5,10 +5,15 @@
<allow own="org.chromium.apmanager"/>
<allow send_destination="org.chromium.apmanager"/>
</policy>
+
<policy user="apmanager">
<allow own="org.chromium.apmanager"/>
- <allow send_destination="org.chromium.apmanager"/>
</policy>
+
+ <policy group="apmanager">
+ <allow send_destination="org.chromium.apmanager" />
+ </policy>
+
<policy context="default">
<deny send_destination="org.chromium.apmanager"/>
</policy>