From c9cf30dc373b521cc243d8c75ac21b02a39c73e7 Mon Sep 17 00:00:00 2001
From: Havoc Pennington <hp@redhat.com>
Date: Thu, 25 Sep 2003 13:38:44 +0000
Subject: 2003-09-25  Havoc Pennington  <hp@pobox.com>

	* bus/session.conf.in: fix security policy, reported by Seth Nickell
---
 ChangeLog           | 4 ++++
 bus/session.conf.in | 6 +++++-
 doc/TODO            | 2 ++
 3 files changed, 11 insertions(+), 1 deletion(-)

diff --git a/ChangeLog b/ChangeLog
index 6317ef54..dc19e03d 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,7 @@
+2003-09-25  Havoc Pennington  <hp@pobox.com>
+
+	* bus/session.conf.in: fix security policy, reported by Seth Nickell
+
 2003-09-25  Seth Nickell  <seth@gnome.org>
 
 	* python/examples/example-service.py:
diff --git a/bus/session.conf.in b/bus/session.conf.in
index 45945688..df76d33f 100644
--- a/bus/session.conf.in
+++ b/bus/session.conf.in
@@ -13,9 +13,13 @@
   <servicedir>@EXPANDED_LIBDIR@/dbus-1.0/services</servicedir>
 
   <policy context="default">
-    <!-- Allow everything -->
+    <!-- Allow everything to be sent -->
+    <allow send_destination="*"/>
+    <!-- Allow everything to be received */
     <allow eavesdrop="true"/>
+    <!-- Allow anyone to own anything -->
     <allow own="*"/>
+    <!-- Allow any user to connect -->
     <allow user="*"/>
   </policy>
 
diff --git a/doc/TODO b/doc/TODO
index c70cc929..f1c8e6aa 100644
--- a/doc/TODO
+++ b/doc/TODO
@@ -92,4 +92,6 @@
 
  - dbus_gproxy or dbus_g_proxy?
 
+ - add dbus_message_has_path(), maybe has_member/interface
+
  - The OBJECT_PATH type is not documented in the spec.
-- 
cgit