Attachment 138796 Details for Bug 106004 – 9/9] dbus-daemon(1): Recommend requiring EXTERNAL on non-Windows OSs

[patch] 9/9] dbus-daemon(1): Recommend requiring EXTERNAL on non-Windows OSs

0009-dbus-daemon-1-Recommend-requiring-EXTERNAL-on-non-Wi.patch (text/plain), 1.20 KB, created by Simon McVittie on 2018-04-12 13:23:06 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Simon McVittie

Created: 2018-04-12 13:23:06 UTC

Size: 1.20 KB

patch

obsolete

>From 357569dd8039e580af3415f494756d321aae9357 Mon Sep 17 00:00:00 2001
>From: Simon McVittie <smcv@collabora.com>
>Date: Thu, 12 Apr 2018 14:09:19 +0100
>Subject: [PATCH 9/9] dbus-daemon(1): Recommend requiring EXTERNAL on
> non-Windows OSs
>
>This is the default, and blocks TCP-based attacks by making the
>attacker fail to authenticate (while also preventing inadvisable
>TCP-based configurations from working).
>
>Signed-off-by: Simon McVittie <smcv@collabora.com>
>---
> doc/dbus-daemon.1.xml.in | 4 ++++
> 1 file changed, 4 insertions(+)
>
>diff --git a/doc/dbus-daemon.1.xml.in b/doc/dbus-daemon.1.xml.in
>index 474dd3a7..bdc655e5 100644
>--- a/doc/dbus-daemon.1.xml.in
>+++ b/doc/dbus-daemon.1.xml.in
>@@ -501,6 +501,10 @@ exist, then all known mechanisms are allowed.  If there are multiple
> &lt;auth&gt; elements, all the listed mechanisms are allowed.  The order in
> which mechanisms are listed is not meaningful.</para>
> 
>+<para>On non-Windows operating systems, allowing only the
>+  <literal>EXTERNAL</literal> authentication
>+  mechanism is strongly recommended. This is the default for the
>+  well-known system bus and for the well-known session bus.</para>
> 
> <para>Example: &lt;auth&gt;EXTERNAL&lt;/auth&gt;</para>
> 
>-- 
>2.17.0
>

Actions: View | Splinter Review

Attachments on bug 106004: 138787 | 138788 | 138789 | 138791 | 138792 | 138793 | 138794 | 138795 | 138796 | 139019 | 139020 | 139021

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.