connman/doc/session-policy-format.txt

ConnMan policy file format
**************************

The session policy plugin allows to configure/provision a session.
ConnMan will be looking for policy files in STORAGEDIR/session_policy_local
which by default points to /var/lib/connman. Policy file names must
not include other characters than letters or numbers and must have
a .policy suffix. Policy files are text files.

It is possible to add, remove or update a policy file during run-time.
The corresponding sessions will be updated accordingly.

Policy group [policy_*]
=======================

Each policy group must start with as [policy_*] tag. '*' has no
semantic meaning but should consist just out of characters.

Required fields:

Exactly one and only one of the required fields need to be present
per policy group.

- uid: This policy group will be applied to any session
  with given user ID.

- gid: This policy group will be applied to any session
  with given group ID.

- selinux: This policy group will be applied to any session
  with given SELinux context.

Allowed fields:

- AllowedBearers: see session-api.txt
  The policy AllowedBearers overrules the settings done via
  D-Bus. For example the policy AllowedBearers is 'ethernet' then
  the D-Bus API will only accept an empty string or 'ethernet'.

- ConnectionType: see session-api.txt
  The policy ConnectionType overrules the settings done via
  D-Bus.

- Priority: A boolean which tells ConnMan to prefer the session
  over other Sessions. This priority value is more for applications
  that want to push themselves up in the asychronization notification
  queue once a bearer becomes online.

  This actual priority order also depends on the allowed bearers and
  other factors. This setting is just a little indicator for one
  application being notified before another one.

- RoamingPolicy: The allowed roaming behavior.

  Valid policies are "national", "international", "default", "always"
  and "forbidden".

  "national" allows roaming within a country.  "international" allows
  roaming in a country and between countries.

  "default" is used to tell the session to use the global roaming
  setting.

  "always" will overwrite the default "forbidden" value which is
  useful for emergency application.

  Default value is "forbidden".

- EmergencyCall: A boolean which tells ConnMan whenever the
  Connect() method is called for this session, all other
  session are disconnected.

  Note only services matching the AllowedBearers rule will be
  considered.

Example
=======

example@example:[~]$ cat /var/lib/connman/session_policy_local/auser.policy
[policy_auser]
uid = auser
AllowedBearers = wifi cellular
RoamingPolicy = forbidden