diff --git a/sources/etc/dbus-1/system.d/com.subgraph.Firewall.conf b/sources/etc/dbus-1/system.d/com.subgraph.Firewall.conf
new file mode 100644
index 0000000..fc5e02d
--- /dev/null
+++ b/sources/etc/dbus-1/system.d/com.subgraph.Firewall.conf
@@ -0,0 +1,28 @@
+<?xml version="1.0" encoding="UTF-8"?> <!-- -*- XML -*- -->
+
+<!DOCTYPE busconfig PUBLIC
+ "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
+ "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
+<busconfig>
+
+  <!-- Only 'user' can own this service -->
+  <policy user="1000">
+    <allow own="com.subgraph.FirewallPrompt"/>
+  </policy>
+
+  <!-- Anyone can send messages to com.subgraph.FirewallPrompt -->
+  <policy context="default">
+    <allow send_destination="com.subgraph.FirewallPrompt"/>
+  </policy>
+
+  <!-- Only root can own this service -->
+  <policy user="0">
+    <allow own="com.subgraph.Firewall" />
+  </policy>
+
+  <!-- Anyone can send messages to com.subgraph.Firewall -->
+  <policy context="default">
+    <allow send_destination="com.subgraph.Firewall" />
+  </policy>
+
+</busconfig>