wt/finit
1
0
Fork 0
mirror of https://github.com/troglobit/finit.git synced 2026-10-11 17:02:42 +07:00
Code Issues Packages Projects Releases Wiki Activity

dbus: policy comment predates the per-sender uid lookup

Browse Source 
It still described treating every system-bus caller as unprivileged as
the state of things, which stopped being true when Finit learned to ask
the broker who sent a call.

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
This commit is contained in:
Joachim Wiberg
2026-08-13 10:15:19 +02:00
parent 127049d925
commit 44e7da6d56
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
dbus-1/org.finit.conf
+4 -4
View File
@@ -11,10 +11,10 @@
every state-changing method at the broker. finit *also* enforces
per-method authorisation itself (LINK_METHOD_PRIVILEGED), so
defense-in-depth: even if a permissive policy is installed by
mistake, finit rejects unprivileged state changes via SO_PEERCRED
on the local bus and by treating every system-bus caller as
unprivileged (peer_uid = (uid_t)-1) until a per-sender uid lookup
via GetConnectionUnixUser is implemented.
mistake, finit rejects unprivileged state changes. It reads the
caller from SO_PEERCRED on the local bus, and on the system bus it
asks the broker who sent each privileged call, via
GetConnectionUnixUser.
-->
<busconfig>