<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>
  <!-- The following demonstrates how to punch holes in a default deny-all 
       policy so that a particular user can own a service, and other 
       connections can get messages from it -->

  <!-- Only root can own the FooService service, and 
       this user can only send the one kind of message -->
  <policy user="root">
    <allow own="org.foo.FooService"/>
    <allow send_interface="org.foo.FooBroadcastInterface"/>
  </policy>

  <!-- Allow any connection to receive the message, but 
       only if the message is sent by the owner of FooService -->
  <policy context="default">
    <allow receive_interface="org.foo.FooBroadcastInterface" receive_sender="org.foo.FooService"/>
  </policy>
</busconfig>
