[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: dbus system bus switching to non-permissive soon for F11



David Malcolm wrote:
On Wed, 2009-02-25 at 09:33 -0500, Colin Walters wrote:
Hi,

I plan to switch the DBus system bus away from the "permissive"
release to the one which closes
https://bugs.freedesktop.org/show_bug.cgi?id=18229
relatively soon in the Fedora 11 tree.

I've been going through bugzillas and getting policies upstream for a
while, and I think the vast majority of things are fixed now.  The
permissive mode has been in rawhide for some time, and will have been
generating messages of the form:

    Feb  2 12:17:38 space-ghost dbus: Rejected send message, 20
matched rules; type="method_return", sender=":1.19" (uid=0 pid=2863
comm="/usr/sbin/wpa_supplicant -c /etc/wpa_supplicant/wp")
interface="(unset)" member="(unset)" error name="(unset)"
requested_reply=0 destination=":1.18" (uid=0 pid=2852
comm="NetworkManager --pid-file=/var/run/NetworkManager/"))

in syslog.  If you're seeing these and I didn't find your bugzilla,
and don't know how to fix, please ask for help at
dbus lists freedesktop org or #dbus on Freenode.

This is a useful chunk of work that:
- touches lots of packages, - helps upstream, - potentially breaks things
  - may need a contingency plan

Should it thus be a "feature" ("ImprovedDBusSecurity"?), so that:
  - it can be mentioned in release notes
  - can involve the Fedora QA team e.g. have a test day
  - can be mentioned in community marketing of Fedora
etc?

Hope this helps
Dave


Yes, please fill out a feature page. There's still time before feature freeze next Tuesday! Let me know if you need assistance.

John


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]