Initial commit.

oddjobd.conf.d/oddjobd-introspection.conf

@@ -0,0 +1,57 @@
+<?xml version="1.0"?>
+
+<!-- This configuration file allows introspection of the services provided by
+     the oddjobd daemon itself by the root user.  In order for an object to be
+     introspectable, all of the objects in its object path must be as well. -->
+
+<oddjobconfig>
+
+  <service name="com.redhat.oddjob">
+
+    <object name="/">
+
+      <interface name="org.freedesktop.DBus.Introspectable">
+
+        <allow min_uid="0" max_uid="0"/>
+        <!-- <method name="Introspect"/> -->
+
+      </interface>
+
+    </object>
+
+    <object name="/com">
+
+      <interface name="org.freedesktop.DBus.Introspectable">
+
+        <allow min_uid="0" max_uid="0"/>
+        <!-- <method name="Introspect"/> -->
+
+      </interface>
+
+    </object>
+
+    <object name="/com/redhat">
+
+      <interface name="org.freedesktop.DBus.Introspectable">
+
+        <allow min_uid="0" max_uid="0"/>
+        <!-- <method name="Introspect"/> -->
+
+      </interface>
+
+    </object>
+
+    <object name="/com/redhat/oddjob">
+
+      <interface name="org.freedesktop.DBus.Introspectable">
+
+        <allow min_uid="0" max_uid="0"/>
+        <!-- <method name="Introspect"/> -->
+
+      </interface>
+
+    </object>
+
+  </service>
+
+</oddjobconfig>

oddjobd.conf.d/oddjobd-mkhomedir.conf

@@ -0,0 +1,46 @@
+<?xml version="1.0"?>
+
+<!-- This configuration file snippet controls the oddjob daemon.  It
+     provides access to mkhomedir functionality via a service named
+     "com.redhat.oddjob_mkhomedir", which exposes a single object
+     ("/").
+     The object allows the root user to call any of the standard D-Bus
+     introspection interface's methods (these are implemented by
+     oddjobd itself), and also defines an interface named
+     "com.redhat.oddjob_mkhomedir", which provides two methods.  -->
+
+<oddjobconfig>
+
+  <service name="com.redhat.oddjob_mkhomedir">
+
+    <object name="/">
+
+      <interface name="org.freedesktop.DBus.Introspectable">
+
+        <allow min_uid="0" max_uid="0"/>
+        <!-- <method name="Introspect"/> -->
+
+      </interface>
+
+      <interface name="com.redhat.oddjob_mkhomedir">
+
+        <method name="mkmyhomedir">
+          <helper exec="/usr/libexec/oddjob/mkhomedir"
+                  arguments="0"
+                  prepend_user_name="yes"/>
+          <!-- no acl entries -> not allowed for anyone -->
+        </method>
+
+        <method name="mkhomedirfor">
+          <helper exec="/usr/libexec/oddjob/mkhomedir"
+                  arguments="1"/>
+          <allow user="root"/>
+        </method>
+
+      </interface>
+
+    </object>
+
+  </service>
+
+</oddjobconfig>