com.coreos.update1.conf

<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
  "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>
  <policy user="root">
    <allow own="com.coreos.update1" />
    <allow send_destination="com.coreos.update1" />
  </policy>
  <policy user="core">
    <!-- introspection is denied -->
    <deny send_destination="com.coreos.update1"
          send_interface="org.freedesktop.DBus.Introspectable" />
    <!-- properties denied -->
    <deny send_destination="com.coreos.update1"
          send_interface="org.freedesktop.DBus.Properties" />
    <!-- allow explicit methods -->
    <allow send_destination="com.coreos.update1"
           send_interface="com.coreos.update1.Manager"
           send_member="AttemptUpdate"/>
    <allow send_destination="com.coreos.update1"
           send_interface="com.coreos.update1.Manager"
           send_member="ResetStatus"/>
    <allow send_destination="com.coreos.update1"
           send_interface="com.coreos.update1.Manager"
           send_member="GetStatus"/>
  </policy>
  <policy context="default">
    <deny send_destination="com.coreos.update1" />
  </policy>
</busconfig>