System and Session Bus

[Havoc Pennington]

>         Does the session bus
>         require not authentication at all?
> 
> (Someone else might be better in answering this point)
> I think there is no authentication apart that only the user in
> question running the particular session 
> bus has the session bus address in his environment and therefore only
> he can use/access the bus/daemon.

There is authentication beyond that; the connecting app has to prove it
can read a cookie from the user's homedir put there by the bus, or that
according to the kernel it is running as the same user as the bus.

Havoc

>