<!DOCTYPE busconfig PUBLIC
 "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>

  <!-- Only root can own and communicate with the service -->

  <policy context="default">
    <deny own="org.fedorahosted.certmonger"/>
    <deny send_destination="org.fedorahosted.certmonger"/>
  </policy>

  <policy user="root">
    <allow own="org.fedorahosted.certmonger"/>

    <allow send_destination="org.fedorahosted.certmonger"
           send_interface="org.fedorahosted.certmonger"/>
    <allow send_destination="org.fedorahosted.certmonger"
           send_interface="org.fedorahosted.certmonger.ca"/>
    <allow send_destination="org.fedorahosted.certmonger"
           send_interface="org.fedorahosted.certmonger.request"/>
    <allow send_destination="org.fedorahosted.certmonger"
           send_interface="org.freedesktop.DBus.Introspectable"/>
    <allow send_destination="org.fedorahosted.certmonger"
           send_interface="org.freedesktop.DBus.Properties"/>
  </policy>

</busconfig>