# Description: Can access the network
# Usage: common
#include <abstractions/nameservice>
#include <abstractions/openssl>

# DownloadManager
dbus (send)
     bus=session
     interface="org.freedesktop.DBus.Introspectable"
     path=/
     member=Introspect,
dbus (receive, send)
     bus=session
     interface=com.canonical.applications.Download{,er}Manager,
dbus (send)
     bus=session
     interface="org.freedesktop.DBus.Introspectable"
     path=/com/canonical/applications/download/**
     member=Introspect,
dbus (receive, send)
     bus=session
     path=/com/canonical/applications/download/**
     interface=com.canonical.applications.Download,
dbus (receive, send)
     bus=session
     path=/com/canonical/applications/download/**
     interface=com.canonical.applications.GroupDownload,

# We want to explicitly deny access to NetworkManager because its DBus API
# gives away too much
deny dbus (send)
     bus=system
     path=/org/freedesktop/NetworkManager,

# Do the same for ofono (LP: #1226844)
deny dbus (send)
     bus=system
     interface="org.ofono.Manager",
