diff options
| -rw-r--r-- | ChangeLog | 4 | ||||
| -rw-r--r-- | bus/session.conf.in | 6 | ||||
| -rw-r--r-- | doc/TODO | 2 | 
3 files changed, 11 insertions, 1 deletions
@@ -1,3 +1,7 @@ +2003-09-25  Havoc Pennington  <hp@pobox.com> + +	* bus/session.conf.in: fix security policy, reported by Seth Nickell +  2003-09-25  Seth Nickell  <seth@gnome.org>  	* python/examples/example-service.py: diff --git a/bus/session.conf.in b/bus/session.conf.in index 45945688..df76d33f 100644 --- a/bus/session.conf.in +++ b/bus/session.conf.in @@ -13,9 +13,13 @@    <servicedir>@EXPANDED_LIBDIR@/dbus-1.0/services</servicedir>    <policy context="default"> -    <!-- Allow everything --> +    <!-- Allow everything to be sent --> +    <allow send_destination="*"/> +    <!-- Allow everything to be received */      <allow eavesdrop="true"/> +    <!-- Allow anyone to own anything -->      <allow own="*"/> +    <!-- Allow any user to connect -->      <allow user="*"/>    </policy> @@ -92,4 +92,6 @@   - dbus_gproxy or dbus_g_proxy? + - add dbus_message_has_path(), maybe has_member/interface +   - The OBJECT_PATH type is not documented in the spec.  | 
