dbus system bus switching to non-permissive soon for F11

John Poelstra poelstra at redhat.com
Wed Feb 25 23:36:10 UTC 2009


David Malcolm wrote:
> On Wed, 2009-02-25 at 09:33 -0500, Colin Walters wrote:
>> Hi,
>>
>> I plan to switch the DBus system bus away from the "permissive"
>> release to the one which closes
>> https://bugs.freedesktop.org/show_bug.cgi?id=18229
>> relatively soon in the Fedora 11 tree.
>>
>> I've been going through bugzillas and getting policies upstream for a
>> while, and I think the vast majority of things are fixed now.  The
>> permissive mode has been in rawhide for some time, and will have been
>> generating messages of the form:
>>
>>     Feb  2 12:17:38 space-ghost dbus: Rejected send message, 20
>> matched rules; type="method_return", sender=":1.19" (uid=0 pid=2863
>> comm="/usr/sbin/wpa_supplicant -c /etc/wpa_supplicant/wp")
>> interface="(unset)" member="(unset)" error name="(unset)"
>> requested_reply=0 destination=":1.18" (uid=0 pid=2852
>> comm="NetworkManager --pid-file=/var/run/NetworkManager/"))
>>
>> in syslog.  If you're seeing these and I didn't find your bugzilla,
>> and don't know how to fix, please ask for help at
>> dbus at lists.freedesktop.org or #dbus on Freenode.
> 
> This is a useful chunk of work that:
>   - touches lots of packages, 
>   - helps upstream, 
>   - potentially breaks things
>   - may need a contingency plan
> 
> Should it thus be a "feature" ("ImprovedDBusSecurity"?), so that:
>   - it can be mentioned in release notes
>   - can involve the Fedora QA team e.g. have a test day
>   - can be mentioned in community marketing of Fedora
> etc?
> 
> Hope this helps
> Dave
> 

Yes, please fill out a feature page.  There's still time before feature 
freeze next Tuesday!  Let me know if you need assistance.

John




More information about the fedora-devel-list mailing list