<html> <head> <meta content="text/html; charset=utf-8" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> Am 26.12.2015 um 10:19 schrieb Nesuan Taiso: <blockquote cite="mid:567E5BBD.3020809@gmail.com" type="cite">On Linux, clients *know* that the system bus is actually controlled by the system administrator because of appropriate file permissions (unix domain sockets) or a privileged TCP port number (<1024). On Windows, the only supported transport is TCP, </blockquote> and nonce-tcp <blockquote cite="mid:567E5BBD.3020809@gmail.com" type="cite">however Windows allows any user to bind to any TCP port. So how does a client verify that the bus it connects to is actually controlled an administrative process </blockquote> on session bus dbus daemon on windows gets the client sid for localhost connections and compare it to the daemon sid 70: [dbus/dbus-sysdeps-win.c(410):_dbus_read_socket] recv: = 1 70: [dbus/dbus-sysdeps-win.c(1967):_dbus_read_credentials_socket] got one zero byte from server 70: [dbus/dbus-sysdeps-win.c(291):_dbus_get_peer_pid_from_tcp_handle] trying to get peer's pid 70: [dbus/dbus-sysdeps-win.c(186):get_pid_from_extended_tcp_table] got pid 46 ... 70: [dbus/dbus-auth.c(2165):goto_state] server: going from state WaitingForBegin to state Authenticated 70: [dbus/dbus-sysdeps-win.c(1029):_dbus_getsid] _dbus_getsid() got 'S-1-5-21-0-0-0-1000' and returns 1 70: [dbus/dbus-transport.c(657):auth_via_default_rules] Client authorized as SID 'S-1-5-21-0-0-0-1000' matching our SID 'S-1-5-21-0-0-0-1000' <blockquote cite="mid:567E5BBD.3020809@gmail.com" type="cite">and not some other hostile user who has 'hijacked' the TCP port </blockquote> There is the tcp option SO_EXCLUSIVEADDRUSE to prevent port hijacking <a class="moz-txt-link-freetext" href="http://www.hsc.fr/ressources/articles/win_net_srv/so_exclusiveaddruse.html">http://www.hsc.fr/ressources/articles/win_net_srv/so_exclusiveaddruse.html</a>, patches welcome. <blockquote cite="mid:567E5BBD.3020809@gmail.com" type="cite">and is masquerading as the real bus in order to sniff traffic? </blockquote> see above. Regards Ralf </body> </html>