From 37e2f4694028458e8ba0a5e64d7f8d0f35b83ebe Mon Sep 17 00:00:00 2001
From: xust <xushitong@uniontech.com>
Date: Wed, 14 Jan 2026 10:40:59 +0800
Subject: [PATCH] fix: Harden DBus security configuration

- Remove redundant allow own rule from default policy
- Keep allow own only in root policy for security
- Remove redundant interface-specific allow rules
- Simplify configuration while maintaining functionality

Log: Improve DBus security by ensuring only root can own the service
---
 service/assets/data/com.deepin.diskmanager.conf | 7 -------
 1 file changed, 7 deletions(-)

diff --git a/service/assets/data/com.deepin.diskmanager.conf b/service/assets/data/com.deepin.diskmanager.conf
index 9a53fcc..52379ba 100755
--- a/service/assets/data/com.deepin.diskmanager.conf
+++ b/service/assets/data/com.deepin.diskmanager.conf
@@ -13,13 +13,6 @@
   <!-- Allow anyone to invoke methods on the interfaces -->
   <policy context="default">
     <allow send_destination="com.deepin.diskmanager"/>
-
-    <allow send_destination="com.deepin.diskmanager"
-           send_interface="com.deepin.diskmanager"/>
-    <allow send_destination="com.deepin.diskmanager"
-           send_interface="org.freedesktop.DBus.Properties"/>
-    <allow send_destination="com.deepin.diskmanager"
-           send_interface="org.freedesktop.DBus.Introspectable"/>
   </policy>
 
 </busconfig>