Attachment 112852 Details for Bug 88811 – [PATCH 4/4] Prevent forged ActivationFailure messages from non-root processes

[patch] [PATCH 4/4] Prevent forged ActivationFailure messages from non-root processes

0004-Prevent-forged-ActivationFailure-messages-from-non-r.patch (text/plain), 1.40 KB, created by Simon McVittie on 2015-01-26 20:53:15 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Simon McVittie

Created: 2015-01-26 20:53:15 UTC

Size: 1.40 KB

patch

obsolete

>From f86ea9406910ac6da1dd84f2410ebddffbbdeed6 Mon Sep 17 00:00:00 2001
>From: Simon McVittie <simon.mcvittie@collabora.co.uk>
>Date: Mon, 26 Jan 2015 20:09:56 +0000
>Subject: [PATCH 4/4] Prevent forged ActivationFailure messages from non-root
> processes
>
>This is redundant with the code fix but is likely to be easier to
>backport.
>---
> bus/system.conf.in | 8 ++++++++
> 1 file changed, 8 insertions(+)
>
>diff --git a/bus/system.conf.in b/bus/system.conf.in
>index c1541bf..f66ea40 100644
>--- a/bus/system.conf.in
>+++ b/bus/system.conf.in
>@@ -73,6 +73,8 @@
>           send_member="UpdateActivationEnvironment"/>
>     <deny send_destination="org.freedesktop.DBus"
>           send_interface="org.freedesktop.DBus.Debug.Stats"/>
>+    <deny send_destination="org.freedesktop.DBus"
>+          send_interface="org.freedesktop.systemd1.Activator"/>
>   </policy>
> 
>   
>+  <policy user="root">
>+    <allow send_destination="org.freedesktop.DBus"
>+           send_interface="org.freedesktop.systemd1.Activator"/>
>+  </policy>
>+
>   
>   <includedir>system.d</includedir>
>-- 
>2.1.4
>

Actions: View | Splinter Review

Attachments on bug 88811: 112849 | 112850 | 112851 | 112852 | 112911 | 112912 | 112913

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.