Re: [PATCH] dbus: allows root to access o.fd.DBus.Introspectable interface

[Jiri Pirko]

Thu, Nov 24, 2022 at 08:36:17AM CET, lkundrak(a)v3.sk wrote:
> This is useful for, well, introspection. Before:
>
>   # busctl tree  org.libteam.teamd.team0
>   Failed to introspect object / of service org.libteam.teamd.team0: Access denied
>   No objects discovered.
>
> After:
>
>   # busctl tree  org.libteam.teamd.team0
>   └─/org
>     └─/org/libteam
>       └─/org/libteam/teamd
>   [root@bzdocha libteam]# busctl introspect  org.libteam.teamd.team0 /org/libteam/teamd
>   NAME               TYPE      SIGNATURE RESULT/VALUE FLAGS
>   org.libteam.teamd  interface -         -            -
>   .ConfigDump        method    -         -            -
>   .ConfigDumpActual  method    -         -            -
>   .PortAdd           method    s         -            -
>   .PortConfigDump    method    s         -            -
>   .PortConfigUpdate  method    ss        -            -
>   .PortRemove        method    s         -            -
>   .StateDump         method    -         -            -
>   .StateItemValueGet method    s         -            -
>   .StateItemValueSet method    ss        -            -
> --- 
You are missing signed off line.


> teamd/dbus/teamd.conf | 1 +
> 1 file changed, 1 insertion(+)
>
>diff --git a/teamd/dbus/teamd.conf b/teamd/dbus/teamd.conf
>index 20366ea..6497a93 100644
>--- a/teamd/dbus/teamd.conf
>+++ b/teamd/dbus/teamd.conf
>@@ -5,6 +5,7 @@
> 	<policy user="root">
> 		<allow own_prefix="org.libteam.teamd"/>
> 		<allow send_interface="org.libteam.teamd"/>
>+		<allow send_interface="org.freedesktop.DBus.Introspectable"/>
> 	</policy>
> 	<policy context="default">
> 		<deny own_prefix="org.libteam.teamd"/>
>-- 
>2.38.1
>