commit abf1770963bfc3d8ff2e89a5fd77ffb02d88d05d
author Colin Howes <chowes@google.com> Mon Nov 19 15:56:03 2018 -0800
committer chrome-bot <chrome-bot@chromium.org> Tue Nov 20 05:52:41 2018 -0800
tree 975b654dbfcc61d504e6c0daa3a1cdb21394cc9a
parent c9e98d6995bdd22de37f18e6b175775939d6159d

update_engine: Add permissions for dlcservice user.

dlcservice needs to query Update Engine status and attempt install
operations.

BUG=chromium:906871
TEST=Check that dlcservice can send GetStatus and AttemptInstall
messages.

Change-Id: I4cfb8befbc1d49984ed8b51980a1d87f372b4c1b
Reviewed-on: https://chromium-review.googlesource.com/1342946
Commit-Ready: ChromeOS CL Exonerator Bot <chromiumos-cl-exonerator@appspot.gserviceaccount.com>
Tested-by: Colin Howes <chowes@google.com>
Reviewed-by: Amin Hassani <ahassani@chromium.org>

UpdateEngine.conf

diff --git a/UpdateEngine.conf b/UpdateEngine.conf
index 192e6ab..9490096 100644
--- a/UpdateEngine.conf
+++ b/UpdateEngine.conf
@@ -76,4 +76,12 @@
            send_interface="org.chromium.UpdateEngineInterface"
            send_member="GetStatus"/>
   </policy>
+  <policy user="dlcservice">
+    <allow send_destination="org.chromium.UpdateEngine"
+           send_interface="org.chromium.UpdateEngineInterface"
+           send_member="GetStatus"/>
+    <allow send_destination="org.chromium.UpdateEngine"
+           send_interface="org.chromium.UpdateEngineInterface"
+           send_member="AttemptInstall"/>
+  </policy>
 </busconfig>