BlueZ configuration file/security question

[Thiago Macieira]

Claudio Takahasi wrote:
>MY QUESTION IS:
>How we can AVOID send message directly to the ServiceAgent? (it is
>possible send a message directly to the ServiceAgent using the "unique
>connection name" and the right path)

I am assuming this is the system bus we're talking about. If so, just 
implement the proper policy rules in your system.d configuration file. 
Make it so that only org.bluez.HCID can send message to 
org.bluez.ServiceAgent interfaces on the system bus. As long as the 
ServiceAgent developers don't start adding other interfaces, you'll be 
protected.

-- 
  Thiago Macieira  -  thiago (AT) macieira.info - thiago (AT) kde.org
    PGP/GPG: 0x6EF45358; fingerprint:
    E067 918B B660 DBD1 105C  966C 33F5 F005 6EF4 5358
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.freedesktop.org/archives/dbus/attachments/20061130/3b47204c/attachment.pgp