add ACL and device-access policy for printers

Added ACL and device-access policy for printers.

2 files changed, 16 insertions, 0 deletions

diff --git a/fdi/policy/10osvendor/20-acl-management.fdi b/fdi/policy/10osvendor/20-acl-management.fdi
index 505e000f..5ad2ab46 100644
--- a/fdi/policy/10osvendor/20-acl-management.fdi
+++ b/fdi/policy/10osvendor/20-acl-management.fdi
@@ -212,6 +212,13 @@
       <merge key="access_control.type" type="string">video</merge>
     </match>
 
+    <!-- printer devices -->
+    <match key="info.capabilities" contains="printer">
+      <addset key="info.capabilities" type="strlist">access_control</addset>
+      <merge key="access_control.file" type="copy_property">printer.device</merge>
+      <merge key="access_control.type" type="string">printer</merge>
+    </match>
+
     <!-- enforcement of policy goes here -->
 
     <!-- add / remove ACL's when devices are added and removed -->
diff --git a/policy/org.freedesktop.hal.device-access.policy b/policy/org.freedesktop.hal.device-access.policy
index 53711744..a2978df3 100644
--- a/policy/org.freedesktop.hal.device-access.policy
+++ b/policy/org.freedesktop.hal.device-access.policy
@@ -154,6 +154,15 @@ NOTE: Please keep the actions in alpabetical order
     </defaults>
   </action>
 
+  <action id="org.freedesktop.hal.device-access.printer">
+    <description>Directly access printers</description>
+    <message>System policy prevents access to printers</message>
+    <defaults>
+      <allow_inactive>no</allow_inactive>
+      <allow_active>yes</allow_active>
+    </defaults>
+  </action>
+
   <action id="org.freedesktop.hal.device-access.scanner">
     <description>Directly access scanners</description>
     <message>System policy prevents access to scanners</message>