Loadable security modules for D-Bus

Lennart Poettering mzqohf at 0pointer.de
Tue Jan 10 16:08:35 PST 2012


On Tue, 10.01.12 10:21, John Johansen (john.johansen at canonical.com) wrote:

> > I do question the general usefulness of D-Bus security. I think it is
> > pretty clear by now that static configuration is not really useful
> > anyway. So not doing this at all and even getting rid of SELinux support
> > might be a good idea.
> > 
> Static configuration has its place, but who says that a security module
> has to be enforcing a static configuration, there are a range of security
> solutions

Well, and precisely this kind of "Oh, the possibilities!" thinking is
why I am strictly against any kind of plugin interface for D-Bus. I am
quite interested in ensuring that D-Bus doesn't turn into a frankenbus,
thank you very much.

Lennart

-- 
Lennart Poettering - Red Hat, Inc.


More information about the dbus mailing list