From 68b0d4f5de30d13b3f4a36d92c958ec799e532e0 Mon Sep 17 00:00:00 2001
From: xust <xushitong@uniontech.com>
Date: Wed, 14 Jan 2026 10:40:59 +0800
Subject: [PATCH] fix: Harden DBus security configuration

- Remove redundant allow own rule from default policy
- Keep allow own only in root policy for security
- Remove redundant interface-specific allow rules
- Simplify configuration while maintaining functionality

Log: Improve DBus security by ensuring only root can own the service
---
 service/assets/data/com.deepin.diskmanager.conf | 8 --------
 1 file changed, 8 deletions(-)

diff --git a/service/assets/data/com.deepin.diskmanager.conf b/service/assets/data/com.deepin.diskmanager.conf
index 487be7e2..52379ba2 100755
--- a/service/assets/data/com.deepin.diskmanager.conf
+++ b/service/assets/data/com.deepin.diskmanager.conf
@@ -12,15 +12,7 @@
 
   <!-- Allow anyone to invoke methods on the interfaces -->
   <policy context="default">
-    <allow own="com.deepin.diskmanager"/>
     <allow send_destination="com.deepin.diskmanager"/>
-
-    <allow send_destination="com.deepin.diskmanager"
-           send_interface="com.deepin.diskmanager"/>
-    <allow send_destination="com.deepin.diskmanager"
-           send_interface="org.freedesktop.DBus.Properties"/>
-    <allow send_destination="com.deepin.diskmanager"
-           send_interface="org.freedesktop.DBus.Introspectable"/>
   </policy>
 
 </busconfig>