[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Possible MBF due to DBus security issue



On Sat Jan 03 17:58, Matthew Johnson wrote:
> All that needs to be done to fix this is to edit the config file which
> is dropped in /etc/dbus-1/system.d/ to allow all of the incoming method
> calls and outgoing signals. Method replies/errors and introspection
> already have exceptions. 

OK clarification from dbus upstream. Replies, errors and signals are all
allowed by default. Introspection is not. It is recommended that every
service has a send_destination rule to allow things to send to the
well-known names which that process owns rather than just send_interface
so that it applies to introspection as well as other method calls.

Matt

Attachment: signature.asc
Description: Digital signature


Reply to: