mirror of
https://github.com/troglobit/finit.git
synced 2026-11-12 16:51:25 +00:00
dbus: policy comment predates the per-sender uid lookup
It still described treating every system-bus caller as unprivileged as the state of things, which stopped being true when Finit learned to ask the broker who sent a call. Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
This commit is contained in:
1 parent
127049d925
commit
44e7da6d56
1 file changed
+4
-4
@@ -11,10 +11,10 @@
|
|||||||
every state-changing method at the broker. finit *also* enforces
|
every state-changing method at the broker. finit *also* enforces
|
||||||
per-method authorisation itself (LINK_METHOD_PRIVILEGED), so
|
per-method authorisation itself (LINK_METHOD_PRIVILEGED), so
|
||||||
defense-in-depth: even if a permissive policy is installed by
|
defense-in-depth: even if a permissive policy is installed by
|
||||||
mistake, finit rejects unprivileged state changes via SO_PEERCRED
|
mistake, finit rejects unprivileged state changes. It reads the
|
||||||
on the local bus and by treating every system-bus caller as
|
caller from SO_PEERCRED on the local bus, and on the system bus it
|
||||||
unprivileged (peer_uid = (uid_t)-1) until a per-sender uid lookup
|
asks the broker who sent each privileged call, via
|
||||||
via GetConnectionUnixUser is implemented.
|
GetConnectionUnixUser.
|
||||||
-->
|
-->
|
||||||
<busconfig>
|
<busconfig>
|
||||||
|
|
||||||
|
|||||||
Reference in new issue
Block a user