summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--ChangeLog4
-rw-r--r--bus/session.conf.in6
-rw-r--r--doc/TODO2
3 files changed, 11 insertions, 1 deletions
diff --git a/ChangeLog b/ChangeLog
index 6317ef54..dc19e03d 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,7 @@
+2003-09-25 Havoc Pennington <hp@pobox.com>
+
+ * bus/session.conf.in: fix security policy, reported by Seth Nickell
+
2003-09-25 Seth Nickell <seth@gnome.org>
* python/examples/example-service.py:
diff --git a/bus/session.conf.in b/bus/session.conf.in
index 45945688..df76d33f 100644
--- a/bus/session.conf.in
+++ b/bus/session.conf.in
@@ -13,9 +13,13 @@
<servicedir>@EXPANDED_LIBDIR@/dbus-1.0/services</servicedir>
<policy context="default">
- <!-- Allow everything -->
+ <!-- Allow everything to be sent -->
+ <allow send_destination="*"/>
+ <!-- Allow everything to be received */
<allow eavesdrop="true"/>
+ <!-- Allow anyone to own anything -->
<allow own="*"/>
+ <!-- Allow any user to connect -->
<allow user="*"/>
</policy>
diff --git a/doc/TODO b/doc/TODO
index c70cc929..f1c8e6aa 100644
--- a/doc/TODO
+++ b/doc/TODO
@@ -92,4 +92,6 @@
- dbus_gproxy or dbus_g_proxy?
+ - add dbus_message_has_path(), maybe has_member/interface
+
- The OBJECT_PATH type is not documented in the spec.