Attachment 132760 Details for Bug 92853 – dbus-daemon(1): Actually document "own" rules

[patch] dbus-daemon(1): Actually document "own" rules

dbus-daemon1-Actually-document-own-rules.patch (text/plain), 1.55 KB, created by Simon McVittie on 2017-07-19 15:31:16 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Simon McVittie

Created: 2017-07-19 15:31:16 UTC

Size: 1.55 KB

patch

obsolete

>From 5f2566d04ef27317880f7933f1868330941fd707 Mon Sep 17 00:00:00 2001
>From: Simon McVittie <smcv@collabora.com>
>Date: Wed, 19 Jul 2017 15:46:00 +0100
>Subject: [PATCH] dbus-daemon(1): Actually document "own" rules
>
>Signed-off-by: Simon McVittie <smcv@collabora.com>
>---
> doc/dbus-daemon.1.xml.in | 11 +++++++++++
> 1 file changed, 11 insertions(+)
>
>diff --git a/doc/dbus-daemon.1.xml.in b/doc/dbus-daemon.1.xml.in
>index 5f8dddd6..be4e1aa8 100644
>--- a/doc/dbus-daemon.1.xml.in
>+++ b/doc/dbus-daemon.1.xml.in
>@@ -938,6 +938,17 @@ the character "*" can be substituted, meaning "any." Complex globs
> like "foo.bar.*" aren't allowed for now because they'd be work to
> implement and maybe encourage sloppy security anyway.</para>
> 
>+<para>
>+  Rules with the <literal>own</literal> or <literal>own_prefix</literal>
>+  attribute are checked when a connection attempts to own a well-known bus
>+  names. As a special case, <literal>own="*"</literal> matches any well-known
>+  bus name. The well-known session bus normally allows any connection to
>+  own any name, while the well-known system bus normally does not allow any
>+  connection to own any name, except where allowed by further configuration.
>+  System services that will own a name must install configuration that allows
>+  them to do so, usually via rules of the form
>+  <literal>&lt;policy user="some-system-user"&gt;&lt;allow own="&hellip;"/&gt;&lt;/policy&gt;</literal>.
>+</para>
> 
> <para>&lt;allow own_prefix="a.b"/&gt; allows you to own the name "a.b" or any
> name whose first dot-separated elements are "a.b": in particular,
>-- 
>2.13.3

Actions: View | Splinter Review

Attachments on bug 92853: 119459 | 119460 | 131602 | 131603 | 131604 | 132757 | 132758 | 132759 | 132760 | 132761 | 132762 | 132763 | 132764 | 132765 | 132766 | 133096 | 133097

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.