summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* | Add message type to security syslog entriesColin Walters2008-12-121-2/+6
| | | | | | | | It's part of the security check, we should have it in the log.
* | Add syslog of security denials and configuration file reloadsColin Walters2008-12-1213-18/+169
| | | | | | | | | | We need to start logging denials so that they become more easily trackable and debuggable.
* | Another manpage update explicitly mentioning bare send_interfaceColin Walters2008-12-091-2/+6
| | | | | | | | | | We need to fix all of the bare send_interface rules; see: https://bugs.freedesktop.org/show_bug.cgi?id=18961
* | Add at_console docs to manpage, as well as brief <policy> forewardColin Walters2008-12-091-2/+4
| | | | | | | | We need some sort of general advice here.
* | Merge branch 'manpage'Colin Walters2008-12-091-3/+13
|\ \
| * | Bug 18229: Update manpage with better adviceColin Walters2008-12-081-3/+13
| | | | | | | | | | | | See https://bugs.freedesktop.org/show_bug.cgi?id=18229
* | | Bug 18229: Allow signalsColin Walters2008-12-095-1/+60
|/ / | | | | | | | | | | | | Our previous fix went too far towards lockdown; many things rely on signals to work, and there's no really good reason to restrict which signals can be emitted on the bus because we can't tie them to a particular sender.
* | Bug 18229 - Change system.conf to correctly deny non-reply sends by defaultTomas Hoger2008-12-051-2/+12
| | | | | | | | | | | | | | | | | | | | | | The previous rule <allow send_requested_reply="true"/> was actually applied to all messages, even if they weren't a reply. This meant that in fact the default DBus policy was effectively allow, rather than deny as claimed. This fix ensures that the above rule only applies to actual reply messages. Signed-off-by: Colin Walters <walters@verbum.org>
* | Infrastructure for testing a "system like" bus in test suiteColin Walters2008-12-054-2/+125
| | | | | | | | | | | | The tmp-session-like-system.conf bus configuration has a security policy intended to mirror that of the system bus. This allows testing policy rules.
* | Bug 15393 - support allow_anonymous config variableDennis Kaarsemaker2008-11-124-1/+37
| | | | | | | | | | | | | | | | | | * bus/bus.c: Set allow_anonymous if specified from parser. * bus/config-parser.c: Parse it. * bus/config-parser-common.h: Declare it. Signed-off-by: Colin Walters <walters@verbum.org>
* | Bug 18064 - more efficient validation for fixed-size type arraysJon Gosting2008-11-101-11/+60
| | | | | | | | | | | | | | * dbus/dbus-marshal-validate.c: If an array is fixed size, skip validation Signed-off-by: Colin Walters <walters@verbum.org>
* | Bug 18446: Keep umask for session busMatt McCutchen2008-11-1011-8/+71
| | | | | | | | Signed-off-by: Colin Walters <walters@verbum.org>
* | Bug 15412: Add --address option to dbus-sendLawrence R. Steeger2008-10-181-6/+45
| | | | | | | | Signed-off-by: Colin Walters <walters@verbum.org>
* | Bug 17969: Don't test for abstract sockets if explicitly disabledLionel Landwerlin2008-10-181-0/+2
| | | | | | | | Signed-off-by: Colin Walters <walters@verbum.org>
* | Initialize AVC earlier so we can look up service security contextsJames Carter2008-10-011-5/+5
| | | | | | | | | | | | | | * bus/bus.c: Initialize AVC earlier: http://lists.freedesktop.org/archives/dbus/2008-October/010493.html Signed-off-by: Colin Walters <walters@verbum.org>
* | Bug 17803: Panic from dbus_signature_validateColin Walters2008-10-012-0/+2
| | | | | | | | | | | | * dbus/dbus-marshal-validate.c: Ensure we validate a basic type before calling is_basic on it. * dbus-marshal-validate-util.c: Test.
* | Add Scott to HACKINGColin Walters2008-09-231-2/+1
| |
* | [win32] Protect usage of SIGHUP with #ifdefTor Lillqvist2008-09-182-9/+16
| | | | | | | | Signed-off-by: Colin Walters <walters@verbum.org>
* | Bug 16755: Ensure we use the correct errnoTor Lillqvist2008-09-181-11/+17
| | | | | | | | | | | | | | | | * dbus/dbus-sysdeps-unix.c: Save errno across cleanup and use it for errors to ensure we display the right error message. Signed-off-by: Colin Walters <walters@verbum.org>
* | Bug 17061: Handle error return from sysconf correctlyJoe Marcus Clarke2008-09-042-2/+10
| | | | | | | | | | | | | | | | | | * dbus/dbus-sysdeps-unix.c: * dbus/dbus-sysdeps-util-unix.c: Cast return from sysconf temporarily so we actually see -1. Signed-off-by: Colin Walters <walters@verbum.org>
* | Bug 17352: synchronize the file before renamingArtem Bityutskiy2008-09-041-0/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Dbus is doing atomic file updates by copying them, changing the copy, and re-naming them. However, it does not synchronize the file before re-naming, which results in corruption in case of unclean reboots. The reason for this is that file-systems have write-back cache and they postpone writing data to the media. This patch adds the missed fsync() for the Unix part. I do not have windows so cannot provide a windows port fix. Signed-off-by: Artem Bityutskiy <Artem.Bityutskiy@nokia.com> Signed-off-by: Colin Walters <walters@verbum.org>
* | Print serial in dbus-monitorMichael Meeks2008-08-291-1/+2
| | | | | | | | | | | | * tools/dbus-print-message.c: Print serial too. Signed-off-by: Colin Walters <walters@verbum.org>
* | Bug 17280: Add a prototype for _dbus_credentials_add_adt_audit_data()Peter McCurdy2008-08-251-0/+3
| | | | | | | | | | | | | | * dbus/dbus-credentials.h: Add a prototype for _dbus_credentials_add_adt_audit_data() Signed-off-by: Colin Walters <walters@verbum.org>
* | 2008-08-24 Peter McCurdy <pmccurdy@skeptopotamus>Peter McCurdy2008-08-251-1/+1
| | | | | | | | | | | | | | | | * dbus/dbus-marshal-recursive.c: A stray comma between two string literals caused incorrect output and a compiler warning. Signed-off-by: Colin Walters <walters@verbum.org>
* | Bug 17060: Explicitly hard fail if expat is not availableColin Walters2008-08-111-11/+8
| | | | | | | | * configure.in: Tweak libxml/expat detection and handling.
* | Bug 13387: Fix compilation failure with AI_ADDRCONFIGJens Granseuer2008-08-071-2/+2
|/ | | | Signed-off-by: Colin Walters <walters@verbum.org>
* Bug 15646: Remove spurious debugging fprintf(stderrColin Walters2008-07-281-1/+0
|
* Bug 16727: Handle ERANGE for getgr; fixes user in many groupsMarc Brockschmidt2008-07-282-27/+96
| | | | | | | | | | Patch originally from Noèl Köthe. Modified by Colin Walters <walters@verbum.org> * dbus/dbus-sysdeps-unix.c, dbus/dbus-sysdeps-unix-utils.c: Use a while() loop to reallocate buffer if we get ERANGE return. This fixes the case where a user is in a large number of groups.
* Bug 16294: Don't lose inotify watch when config fails to parseColin Walters2008-07-281-9/+12
| | | | | | * bus/dir-watch-inotify.c: Always drop the watch in handle_inotify_watch; this ensures we always readd it correctly in bus_drop_all_directory_watches.
* Bug 16838: Use bash instead of sh to avoid breaking on UbuntuColin Walters2008-07-241-1/+1
|
* Merge branch 'master' of ssh://walters@git.freedesktop.org/git/dbus/dbusColin Walters2008-07-2412-20/+531
|\
| * Fix leaks in bus_activation_get_environment error pathsRay Strode2008-07-151-2/+5
| | | | | | | | | | | | | | | | Commit 91306ef938873fce8f2ae2d4a6b3282d0379c65a introduced two memory leaks on OOM error paths. In one case the environment string array wasn't getting freed, and in the other case it was getting freed with dbus_free instead of dbus_free_string_array.
| * Update man page to make the point of the <type> element more clearRay Strode2008-07-121-1/+15
| | | | | | | | | | | | | | | | There have been a number of patches in the past try to key system versus session bus policy off of the message bus type, when the policy should be distinguished from more fine-grained options in the individulal policy files. Hopefully, this man page update will make that more clear.
| * Add new UpdateActivationEnvironment bus messageRay Strode2008-07-123-0/+169
| | | | | | | | | | | | | | | | It adjusts the environment of activated bus clients. This is important for session managers that get started after the session bus daemon and want to influence the environment of desktop services that are started by the bus.
| * Store what environment to activate with on activation objectRay Strode2008-07-122-18/+217
| | | | | | | | | | | | | | | | We now keep the environment in a hash table member of the activation object and provide a method bus_activation_set_environment_variable to modify the hash table. This hash table is seeded initially with the environment of the bus daemon itself.
| * When spawning processes, don't ignore the passed in environmentRay Strode2008-07-121-1/+14
| | | | | | | | | | | | | | | | Previously, we'd always call execv() and unconditionally use the environment of the parent. Now we call execve() with the passed in environment. For compatibility, we detect if the passed in environment is NULL and for that case, use the environment from the parent instead.
| * Add new function _dbus_string_split_on_byteRay Strode2008-07-113-0/+70
| | | | | | | | | | It allows you to turn a string like KEY=VALUE into two strings key and value.
| * Add new _dbus_get_environment callRay Strode2008-07-112-0/+43
| | | | | | | | | | | | | | | | It's a wrapper around the environ external variable. It will be important in the future when we allow bus clients to modify the environment of future activated clients. Presently, we just always use the bus daemon environment wholesale.
* | Bug 16839: Fix bus names in test case so it actually works.Scott James Remnant2008-07-242-7/+7
|/ | | | | | * test/name-test/test-privserver.c (filter_session_message, main), * test/name-test/test-privserver-client.c (open_shutdown_private_connection): Replace TestServer with PrivServer to match the service definition files.
* Merge branch 'dbus-1.2'Thiago Macieira2008-06-071-6/+5
|\
| * Fix inverted return value from dbus_connection_read_write()Oswald Buddenhagen2008-06-071-4/+6
| | | | | | | | | | | | | | | | | | * dbus/dbus-connection.c (_dbus_connection_read_write_dispatch): The double negation re no_progress_possible was obviously too confusing: the path for dispatch = FALSE would return an inverted status. So make it progress_possible and fix the logic. Signed-off-by: Thiago Macieira <thiago@kde.org>
* | Bug 15740: Solaris/ADT auditing support (simon zheng)Colin Walters2008-06-0511-3/+296
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * bus/driver.c: Add GetAdtAuditSessionData method which returns audit data for a connection. * configure.in: Detect ADT auditing support * dbus/dbus-auth.c: Read ADT auditing creds. * dbus/dbus-connection.c: Implement dbus_connection_get_adt_audit_session_data. * dbus/dbus-connection.h: Export it. * dbus/dbus-credentials.c: Add support for gathering adt_audit_data and retrieving it via _dbus_credentials_get_adt_audit_data. * dbus/dbus-credentials.h: Add DBUS_CREDENTIAL_ADT_AUDIT_DATA_ID. * dbus/dbus-protocol.h: New error DBUS_ERROR_ADT_AUDIT_DATA_UNKNOWN. * dbus/dbus-sysdeps.c: Support for reading audit credentials via ADT API. * dbus/dbus-transport.c: New function _dbus_transport_get_adt_audit_session_data to retrieve credentials. * dbus/dbus-transport.h: Export it.
* | Tweak HACKING to describe test/name-test brieflyColin Walters2008-05-301-1/+6
| | | | | | | | * HACKING: Describe test/name-test.
* | Bug 15635: Hold a reference during read/write dispatch (Scott James Remnant)Colin Walters2008-05-301-0/+10
| | | | | | | | | | | | | | | | * dbus/dbus-connection.c (_dbus_connection_read_write_dispatch): Reference the D-Bus connection during the function call since we call other functions that may free the last reference and we still expect to be able to check the connection after they return to decide our own return value.
* | Bug 15571: Clean up GUID-less connections correctly (Scott James Remnant)Colin Walters2008-05-302-8/+29
| | | | | | | | | | | | | | | | | | * dbus/dbus-connection.c (connection_forget_shared_unlocked): Remove shared connections which lack a GUID from the list that caches those, otherwise references to them will remain after they have been freed. * test/name-test/test-privserver-client.c: Update test to try GUID-less connections too.
* | Bug 15570: Reset initialized state on dbus_shutdown (Scott James Remnant)Colin Walters2008-05-302-2/+2
| | | | | | | | | | | | | | | | * dbus/dbus-bus.c (addresses_shutdown_func): Reset initialized back to FALSE after cleaning up the address list so that it will be reinitialized again if D-Bus is used after dbus_shutdown() * test/name-test/test-privserver-client.c: Uncomment part of test which should now pass.
* | Add "PrivServer" test which exercises DBusServer and dbus_shutdownColin Walters2008-05-306-1/+249
| | | | | | | | | | | | | | | | | | | | | | | | | | | | * test/data/valid-service-files/org.freedesktop.DBus.TestSuite.PrivServer.service.in: New service file for PrivServer. * configure.in: Generate it. * test/name-test/Makefile.am: Build test-privserver and test-privserver-client. * test/name-test/test-privserver.c: Use DBusServer to serve a private connection. * test/name-test/test-privserver-client.c: Connect via session bus and get address of private server, exercise dbus_shutdown(). * test/name-test/run-test.sh: Run it.
* | Add noinst convenience test library, add a test-shutdownColin Walters2008-05-305-17/+93
| | | | | | | | | | | | | | | | | | | | | | | | | | * test/Makefile.am: New convenience library libdbus_testutils_la. Reorder build so that test/ gets built before test/name-test so name-test files can depend on it. * test/name-test/test-shutdown.c: New file, exercises dbus_shutdown () a bit. * test/name-test/run-test.sh Run test-shutdown. * test/test-utils.h: In some cases we already have DBUS_COMPILATION defined, avoid double definition warning.
* | Add test library functions for using DBusServerColin Walters2008-05-302-0/+158
| | | | | | | | | | | | * test/test-utils.h, test/test-utils.c: Add functions which hook up a DBusServer to a DBusLoop, useful for test cases.
* | Bug 15588: Fix typo in #ifdef for userdb cache (Scott James Remnant)Colin Walters2008-05-302-2/+2
| | | | | | | | | | | | * dbus/dbus-userdb-util.c, dbus/dbus-userdb.c: Correct name of macro used in #ifdef block to match that defined by configure, otherwise the userdb cache will never be enabled.