dbus system bus switching to non-permissive soon for F11
David Malcolm
dmalcolm at redhat.com
Wed Feb 25 23:16:52 UTC 2009
On Wed, 2009-02-25 at 09:33 -0500, Colin Walters wrote:
> Hi,
>
> I plan to switch the DBus system bus away from the "permissive"
> release to the one which closes
> https://bugs.freedesktop.org/show_bug.cgi?id=18229
> relatively soon in the Fedora 11 tree.
>
> I've been going through bugzillas and getting policies upstream for a
> while, and I think the vast majority of things are fixed now. The
> permissive mode has been in rawhide for some time, and will have been
> generating messages of the form:
>
> Feb 2 12:17:38 space-ghost dbus: Rejected send message, 20
> matched rules; type="method_return", sender=":1.19" (uid=0 pid=2863
> comm="/usr/sbin/wpa_supplicant -c /etc/wpa_supplicant/wp")
> interface="(unset)" member="(unset)" error name="(unset)"
> requested_reply=0 destination=":1.18" (uid=0 pid=2852
> comm="NetworkManager --pid-file=/var/run/NetworkManager/"))
>
> in syslog. If you're seeing these and I didn't find your bugzilla,
> and don't know how to fix, please ask for help at
> dbus at lists.freedesktop.org or #dbus on Freenode.
This is a useful chunk of work that:
- touches lots of packages,
- helps upstream,
- potentially breaks things
- may need a contingency plan
Should it thus be a "feature" ("ImprovedDBusSecurity"?), so that:
- it can be mentioned in release notes
- can involve the Fedora QA team e.g. have a test day
- can be mentioned in community marketing of Fedora
etc?
Hope this helps
Dave
More information about the devel
mailing list