The Plan for CVE-2008-4311

[Colin Walters]

On Tue, Jan 13, 2009 at 6:28 PM, Scott James Remnant
<scott at canonical.com> wrote:
>
> I'd go with something even simpler:
>
> <service name="org.freedesktop.Hal" user="root">
>  <allow interface="org.freedesktop.Hal.EraseMyDisks" user=root" />
>  <allow interface="org.freedesktop.Hal.GetDiskGeometry" />
> </service>
>
> (The distinction between send/receive has always been confusing ;p)

Looks good, I've tossed this into a bug so we don't forget:

http://bugs.freedesktop.org/show_bug.cgi?id=19593