From 654ddec142d460a6daec93255702c3a07af41f27 Mon Sep 17 00:00:00 2001
From: Max Moser <maxmanski@live.at>
Date: Mon, 12 Feb 2018 18:49:55 +0100
Subject: [PATCH] Deny permission to use d-bus name wireguard per default

---
 nm-wireguard-service.conf | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/nm-wireguard-service.conf b/nm-wireguard-service.conf
index af24c59..2b00e0a 100644
--- a/nm-wireguard-service.conf
+++ b/nm-wireguard-service.conf
@@ -10,10 +10,9 @@
 		<allow own_prefix="org.freedesktop.NetworkManager.wireguard"/>
 		<allow send_destination="org.freedesktop.NetworkManager.wireguard"/>
 	</policy>
-	<!-- TODO deny per default -->
 	<policy context="default">
-		<allow own_prefix="org.freedesktop.NetworkManager.wireguard"/>
-		<allow send_destination="org.freedesktop.NetworkManager.wireguard"/>
+		<deny own_prefix="org.freedesktop.NetworkManager.wireguard"/>
+		<deny send_destination="org.freedesktop.NetworkManager.wireguard"/>
 	</policy>
 </busconfig>