[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: dbus system bus switching to non-permissive soon for F11

David Malcolm wrote:
On Wed, 2009-02-25 at 09:33 -0500, Colin Walters wrote:

I plan to switch the DBus system bus away from the "permissive"
release to the one which closes
relatively soon in the Fedora 11 tree.

I've been going through bugzillas and getting policies upstream for a
while, and I think the vast majority of things are fixed now.  The
permissive mode has been in rawhide for some time, and will have been
generating messages of the form:

    Feb  2 12:17:38 space-ghost dbus: Rejected send message, 20
matched rules; type="method_return", sender=":1.19" (uid=0 pid=2863
comm="/usr/sbin/wpa_supplicant -c /etc/wpa_supplicant/wp")
interface="(unset)" member="(unset)" error name="(unset)"
requested_reply=0 destination=":1.18" (uid=0 pid=2852
comm="NetworkManager --pid-file=/var/run/NetworkManager/"))

in syslog.  If you're seeing these and I didn't find your bugzilla,
and don't know how to fix, please ask for help at
dbus lists freedesktop org or #dbus on Freenode.

This is a useful chunk of work that:
- touches lots of packages, - helps upstream, - potentially breaks things
  - may need a contingency plan

Should it thus be a "feature" ("ImprovedDBusSecurity"?), so that:
  - it can be mentioned in release notes
  - can involve the Fedora QA team e.g. have a test day
  - can be mentioned in community marketing of Fedora

Hope this helps

Yes, please fill out a feature page. There's still time before feature freeze next Tuesday! Let me know if you need assistance.


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]