dbus ChangeLog,1.888,1.889 NEWS,1.26,1.27

[John Palmieri]

Update of /cvs/dbus/dbus
In directory gabe:/tmp/cvs-serv17008

Modified Files:
	ChangeLog NEWS 
Log Message:
* Release 0.36.2

* Add Havoc's patch that never got applied to HEAD (Bug #2436):

* bus/policy.c (bus_policy_allow_user): change default "user is
allowed" to be "user has same uid as the bus itself"; any
allow/deny rules will override.

* bus/session.conf.in: don't allow all users, since now by default
the user that ran the bus can connect.



Index: ChangeLog
===================================================================
RCS file: /cvs/dbus/dbus/ChangeLog,v
retrieving revision 1.888
retrieving revision 1.889
diff -u -d -r1.888 -r1.889
--- ChangeLog	26 Aug 2005 15:41:31 -0000	1.888
+++ ChangeLog	29 Aug 2005 20:19:19 -0000	1.889
@@ -1,3 +1,16 @@
+2005-08-29  John (J5) Palmieri  <johnp at redhat.com>
+
+	* Release 0.36.2
+
+	* Add Havoc's patch that never got applied to HEAD (Bug #2436):
+
+	* bus/policy.c (bus_policy_allow_user): change default "user is
+	allowed" to be "user has same uid as the bus itself"; any
+	allow/deny rules will override.
+
+	* bus/session.conf.in: don't allow all users, since now by default
+	the user that ran the bus can connect.
+
 2005-08-26  Colin Walters  <walters at verbum.org>
 
 	* tools/dbus-print-message.c (print_message): Flush stdout

Index: NEWS
===================================================================
RCS file: /cvs/dbus/dbus/NEWS,v
retrieving revision 1.26
retrieving revision 1.27
diff -u -d -r1.26 -r1.27
--- NEWS	24 Aug 2005 19:58:32 -0000	1.26
+++ NEWS	29 Aug 2005 20:19:19 -0000	1.27
@@ -1,3 +1,8 @@
+D-BUS 0.36.2 (29 August 2005)
+===
+- Security: Restrict other users from connecting to another users 
+  session bus
+
 D-BUS 0.36.1 (24 August 2005)
 ===
 - Python Bindings: