summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Add requested_reply to send denials, and connection loginfo to "would deny"dbus-1.0-branchColin Walters2009-01-211-31/+38
| | | | | | The requested_reply field is necessary in send denials too because it's used in the policy language. The connection loginfo lack in "would deny" was just an oversight.
* Add uid, pid, and command to security logsColin Walters2009-01-215-19/+220
| | | | | | | | | | | | Extend the current security logs with even more relevant information than just the message content. This requires some utility code to look up and cache (as a string) the data such as the uid/pid/command when a connection is authenticated. Conflicts: bus/connection.c
* Add optional logging on allow rulesColin Walters2009-01-214-16/+34
| | | | | | | | | This lets us have a backwards compatibility allow rule but still easily see when that rule is being used. Conflicts: bus/config-parser.c
* Add message type to security syslog entriesColin Walters2009-01-211-2/+6
| | | | It's part of the security check, we should have it in the log.
* Add syslog of security denials and configuration file reloadsColin Walters2009-01-2111-22/+168
| | | | | | | | | | | | | We need to start logging denials so that they become more easily trackable and debuggable. Conflicts: bus/bus.c bus/config-parser-common.c bus/config-parser-common.h bus/config-parser.c test/name-test/tmp-session-like-system.conf
* Clean up and clarify default system policyColin Walters2009-01-212-46/+45
| | | | | | | | | The former was too reliant on old bugs and was generally unclear. This one makes explicit exactly what is allowed and not. Conflicts: bus/system.conf.in
* Bug 18229: Allow signalsColin Walters2009-01-215-1/+60
| | | | | | | Our previous fix went too far towards lockdown; many things rely on signals to work, and there's no really good reason to restrict which signals can be emitted on the bus because we can't tie them to a particular sender.
* Bug 18229 - Change system.conf to correctly deny non-reply sends by defaultColin Walters2009-01-212-6/+12
| | | | | | | | | | | | | | | The previous rule <allow send_requested_reply="true"/> was actually applied to all messages, even if they weren't a reply. This meant that in fact the default DBus policy was effectively allow, rather than deny as claimed. This fix ensures that the above rule only applies to actual reply messages. Signed-off-by: Colin Walters <walters@verbum.org> Conflicts: bus/system.conf.in
* Infrastructure for testing a "system like" bus in test suiteColin Walters2009-01-214-2/+125
| | | | | | The tmp-session-like-system.conf bus configuration has a security policy intended to mirror that of the system bus. This allows testing policy rules.
* Add session.d to build structure, corresponding with commit a579e3b0Colin Walters2009-01-211-0/+1
|
* Fix build on recent glibcColin Walters2009-01-211-0/+3
| | | | Extracted from trunk commit be875094.
* bump version after releaseJohn (J5) Palmieri2008-02-271-1/+1
|
* Released 1.0.3DBUS_1_0_3John (J5) Palmieri2008-02-262-0/+22
|
* CVE-2008-0595 dbus security policy circumventionJohn (J5) Palmieri2008-02-262-6/+38
| | | | | | | | | | | * CVE-2008-0595 - security policy of the type <allow send_interface= "some.interface.WithMethods"/> work as an implicit allow for messages sent without an interface bypassing the default deny rules and potentially allowing restricted methods exported on the bus to be executed by unauthorized users. This patch fixes the issue. * bus/policy.c (bus_client_policy_check_can_send, bus_client_policy_check_can_receive): skip messages without an interface when evaluating an allow rule
* correctly unref connections without guids during shutdownJohn (J5) Palmieri2008-02-262-13/+56
| | | | | | | | | | * dbus/dbus-connection.c (close_connection_on_shutdown): new method split out from shared_connections_shutdown (shared_connections_shutdown): shutdown all shared connections without guids (_dbus_connection_ref_unlocked): handle OOM when prepending no guid connections to the shared_connections_no_guid list * Patch by Kimmo Hämäläinen <kimmo dot hamalainen at nokia dot com>
* 2007-07-18 Havoc Pennington <hp@redhat.com>Havoc Pennington2007-07-182-4/+11
| | | | | | | * dbus/dbus-message.c (dbus_message_get_cached) (dbus_message_cache_or_finalize): don't mess with message from message cache outside of the cache lock. Bug #9164 from Jonathan Matthew.
* 2007-07-10 Havoc Pennington <hp@redhat.com>Havoc Pennington2007-07-102-3/+14
| | | | | | | * dbus/dbus-connection.c (struct DBusConnection): Fix from Olivier Hochreutiner to avoid trying to protect individual bits in a word with different locks (make dispatch_acquired and io_path_acquired dbus_bool_t rather than bitfields)
* 2007-06-08 Havoc Pennington <hp@redhat.com>Havoc Pennington2007-06-085-10/+33
| | | | | * backport fix to allow a server to use port=0 or omit port so the port can be auto-selected by the OS
* 2007-05-23 Havoc Pennington <hp@redhat.com>Havoc Pennington2007-05-233-0/+12
| | | | | | | * bus/Makefile.am (install-data-hook): create session.d * bus/session.conf.in: add session.d for the session bus, so security policy can be extended
* 2007-04-27 Havoc Pennington <hp@redhat.com>Havoc Pennington2007-04-272-3/+9
| | | | | | * dbus/dbus-sysdeps-unix.c (_dbus_open_socket): fix #10781 from Tobias Nygren, checking pointer to fd vs. 0 rather than checking the fd itself
* Backport from MAIN:Thiago Macieira2007-03-034-3/+87
| | | | | | | | | | | * dbus/dbus-sysdeps-unix.c: capture the dbus-launch stderr output and add it to the DBusError message we return. * tools/dbus-launch.1: * tools/dbus-launch.c: Add option --close-stderr to, well, close stderr before starting dbus-daemon. I hope adding an option to dbus-launch in the 1.0.x series was ok.
* 2007-01-31 Havoc Pennington <hp@redhat.com>Havoc Pennington2007-02-012-0/+58
| | | | | * bus/dbus-daemon.1.in: write a section in the man page on running a test daemon for debugging purposes
* 2007-01-26 Havoc Pennington <hp@redhat.com>Havoc Pennington2007-01-263-8/+45
| | | | | | | | | | * bus/session.conf.in: override all the default limits with much higher limits on the session bus, there is no reason the session bus should have low limits * bus/config-parser.c (bus_config_parser_new): increase default limits so they are less likely to be hit; in particular the max replies per connection was way too low
* * bump releaseJohn (J5) Palmieri2006-12-121-1/+1
|
* * Released 1.0.2John (J5) Palmieri2006-12-122-0/+10
|
* * bus/signal.c: Fix match_rule_equal errataJohn (J5) Palmieri2006-12-122-0/+9
| | | | | (CVE-2006-6107 - Patch from Kimmo Hämäläinen <kimmo.hamalainen@nokia.com>)
* Backporting from HEAD:Thiago Macieira2006-11-222-1/+13
| | | | | | | | | * dbus/dbus-sysdeps-pthread.c (_dbus_pthread_mutex_lock, _dbus_pthread_condvar_wait, _dbus_pthread_condvar_wait_timeout): set pmutex->holder to pthread_self() after coming back from a conditional variable wait as well as in one codepath where it was forgotten. Approved by: Havoc Pennington.
* 2006-11-17 Havoc Pennington <hp@redhat.com>Havoc Pennington2006-11-182-4/+19
| | | | | | | * update-dbus-docs.sh: allow setting fd.org username via env variable. Make it run autogen with --enable-xml-docs=yes --enable-doxygen-docs=yes so configure will fail if the required tools are missing.
* 2006-11-17 Havoc Pennington <hp@redhat.com>Havoc Pennington2006-11-182-5/+18
| | | | * doc/dbus-faq.xml: minor FAQ tweaks
* * bump for next releaseJohn (J5) Palmieri2006-11-171-1/+1
|
* * Released 1.0.1John (J5) Palmieri2006-11-172-0/+10
|
* 2006-11-14 Havoc Pennington <hp@redhat.com>Havoc Pennington2006-11-159-59/+174
| | | | | | | | * dbus/dbus-misc.c, dbus/dbus-misc.h: Move dbus_get_local_machine_id() to its own file, no substantive changes. There are a couple other things we might want to add that are "misc" so moving out of dbus-connection.[hc] which is big enough already.
* 2006-11-14 Havoc Pennington <hp@redhat.com>Havoc Pennington2006-11-156-38/+94
| | | | | | | | | | | | | | * dbus/dbus-internals.c (_dbus_generate_uuid): The spec said the UUID had the timestamp last, but the implementation had it first; move it to last since I think it's a tiny bit nicer (easier to compare at a glance, faster to sort, less code), and will not cause any practical compatibility problems. Also, always convert the timestamp to big endian. * doc/dbus-specification.xml: Clean up the docs on the UUID. * tools/dbus-uuidgen.1: more prominently say it is not suitable as a replacement for regular uuidgen/RFC4122.
* * configure.in: Bump version to 1.0.1 for next stable releaseJohn (J5) Palmieri2006-11-144-3/+14
| | | | | | | | | * dbus/dbus-threads.h: fix DBUS_THREAD_FUNCTIONS_ALL_MASK to have the correct value so we don't assert when initalizing recursive threads * test/name-test/test-thread-init.c: call dbus_threads_init_default instead of _dbus_threads_init_debug since it is more of a real world test
* This commit was manufactured by cvs2svn to create branch 'dbus-1.0'.Ryan Lortie2006-11-100-0/+0
|
* * really release 1.0.0dbus-1.0.0John (J5) Palmieri2006-11-102-1/+7
| | | | * AUTHORS: added Peter and Tor of windows porting fame
* 2006-11-08 Havoc Pennington <hp@redhat.com>Havoc Pennington2006-11-093-2/+35
| | | | | | | * doc/dbus-specification.xml: add a note about protocol stability * doc/TODO: Remove "important for 1.0" section, replace with "important for 1.2" section
* * Released 1.0.0John (J5) Palmieri2006-11-083-1/+13
|
* * README: remove some of the out of date flagsJohn (J5) Palmieri2006-11-083-9/+6
| | | | * doc/TODO: Remove todo items which are done
* * tools/dbus-monitor.c: Handle sigint so we flush stdoutJohn (J5) Palmieri2006-11-082-1/+21
| | | | (Patch from Olli Salli <olli dot salli at collabora dot co dot uk>)
* * tools/dbus-monitor.1: update the manpage for dbus-monitorJohn (J5) Palmieri2006-11-082-1/+21
| | | | (Patch from Olli Salli <olli dot salli at collabora dot co dot uk>)
* * AUTHORS: Update with all people listed in the ChangeLogJohn (J5) Palmieri2006-11-082-1/+46
|
* * tools/dbus-monitor.c: add profiling tools to dbus-monitorJohn (J5) Palmieri2006-11-082-4/+127
| | | | (Patch from Olli Salli <olli dot salli at collabora dot co dot uk>)
* 1-char changeHavoc Pennington2006-11-071-1/+1
|
* 2006-11-07 Havoc Pennington <hp@redhat.com>Havoc Pennington2006-11-072-2/+43
| | | | | | | * HACKING: Update release instructions to include stuff about stable releases, branching, etc. May not be totally correct, please fix if needed, but keep instructions up-to-date so we do each stable release consistently in the future.
* 2006-11-07 Havoc Pennington <hp@redhat.com>Havoc Pennington2006-11-076-48/+144
| | | | | | * doc/dbus-specification.xml, doc/dbus-faq.xml, README: various documentation updates. Bump faq/spec versions (not to 1.0; I don't think the spec will be "finished"/1.0 when we ship the 1.0 library).
* * bus/bus.c: Missed patch - pass in the context to the directory watchJohn (J5) Palmieri2006-11-062-1/+5
|
* * bump releaseJohn (J5) Palmieri2006-11-032-4/+4
|
* * Released D-Bus 1.0 RC 3(0.95)dbus-0.95John (J5) Palmieri2006-11-032-0/+30
|
* * bus/activation.c (bus_activation_new): don't fail if we can not readJohn (J5) Palmieri2006-11-032-2/+13
| | | | the directory as it may not exist
View Lorry Controller Status