Bug 101700

Summary: Normal users can't fetch bus driver properties on system bus
Product: dbus Reporter: Simon McVittie <smcv>
Component: coreAssignee: Simon McVittie <smcv>
Status: RESOLVED FIXED QA Contact: D-Bus Maintainers <dbus>
Severity: normal    
Priority: medium Keywords: patch
Version: git master   
Hardware: Other   
OS: All   
Whiteboard: review+
i915 platform: i915 features:
Bug Depends on:    
Bug Blocks: 101354    
Attachments: system.conf: Allow unprivileged users to get dbus-daemon properties

Description Simon McVittie 2017-07-05 17:01:49 UTC
Created attachment 132461 [details] [review]
system.conf: Allow unprivileged users to get dbus-daemon  properties

---

Bug #101256 added Features and Interfaces properties to the dbus-daemon, but did not allow system bus users to read them. This was not intentional.

If we ever add properties that are security-sensitive, then we'll need to control access to them somehow, but (a) the XML policy language can't express the equivalent of arg0 match rules, and (b) I think flags in bus/driver.c (INTERFACE_FLAG_PRIVILEGED?) would be a better way to do that anyway.
Comment 1 Philip Withnall 2017-07-05 17:05:57 UTC
Comment on attachment 132461 [details] [review]
system.conf: Allow unprivileged users to get dbus-daemon  properties

Review of attachment 132461 [details] [review]:
-----------------------------------------------------------------

++
Comment 2 Simon McVittie 2017-07-06 18:05:07 UTC
Thanks, pushed for 1.11.16.

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.