Merge remote-tracking branch 'remotes/armbru/tags/pull-monitor-2020-02-15-v2' into...
[qemu.git] / tests / dbus-vmstate-daemon.sh
1 #!/bin/sh
2
3 # dbus-daemon wrapper script for dbus-vmstate testing
4 #
5 # This script allows to tweak the dbus-daemon policy during the test
6 # to test different configurations.
7 #
8 # This program is free software; you can redistribute it and/or modify
9 # it under the terms of the GNU General Public License as published by
10 # the Free Software Foundation; either version 2 of the License, or
11 # (at your option) any later version.
12 #
13 # This program is distributed in the hope that it will be useful,
14 # but WITHOUT ANY WARRANTY; without even the implied warranty of
15 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 # GNU General Public License for more details.
17 #
18 # You should have received a copy of the GNU General Public License
19 # along with this program; if not, see <http://www.gnu.org/licenses/>.
20 #
21 # Copyright (C) 2019 Red Hat, Inc.
22
23 write_config()
24 {
25 CONF="$1"
26 cat > "$CONF" <<EOF
27 <busconfig>
28 <type>session</type>
29 <listen>unix:tmpdir=$DBUS_VMSTATE_TEST_TMPDIR</listen>
30
31 <policy context="default">
32 <!-- Holes must be punched in service configuration files for
33 name ownership and sending method calls -->
34 <deny own="*"/>
35 <deny send_type="method_call"/>
36
37 <!-- Signals and reply messages (method returns, errors) are allowed
38 by default -->
39 <allow send_type="signal"/>
40 <allow send_requested_reply="true" send_type="method_return"/>
41 <allow send_requested_reply="true" send_type="error"/>
42
43 <!-- All messages may be received by default -->
44 <allow receive_type="method_call"/>
45 <allow receive_type="method_return"/>
46 <allow receive_type="error"/>
47 <allow receive_type="signal"/>
48
49 <!-- Allow anyone to talk to the message bus -->
50 <allow send_destination="org.freedesktop.DBus"
51 send_interface="org.freedesktop.DBus" />
52 <allow send_destination="org.freedesktop.DBus"
53 send_interface="org.freedesktop.DBus.Introspectable"/>
54 <allow send_destination="org.freedesktop.DBus"
55 send_interface="org.freedesktop.DBus.Properties"/>
56 <!-- But disallow some specific bus services -->
57 <deny send_destination="org.freedesktop.DBus"
58 send_interface="org.freedesktop.DBus"
59 send_member="UpdateActivationEnvironment"/>
60 <deny send_destination="org.freedesktop.DBus"
61 send_interface="org.freedesktop.DBus.Debug.Stats"/>
62 <deny send_destination="org.freedesktop.DBus"
63 send_interface="org.freedesktop.systemd1.Activator"/>
64
65 <allow own="org.qemu.VMState1"/>
66 <allow send_destination="org.qemu.VMState1"/>
67 <allow receive_sender="org.qemu.VMState1"/>
68
69 </policy>
70
71 <include if_selinux_enabled="yes"
72 selinux_root_relative="yes">contexts/dbus_contexts</include>
73
74 </busconfig>
75 EOF
76 }
77
78 ARGS=
79 for arg in "$@"
80 do
81 case $arg in
82 --config-file=*)
83 CONF="${arg#*=}"
84 write_config "$CONF"
85 ARGS="$ARGS $1"
86 shift
87 ;;
88 *)
89 ARGS="$ARGS $1"
90 shift
91 ;;
92 esac
93 done
94
95 exec dbus-daemon $ARGS