set user id for service ?

Thiago Macieira thiago at
Thu Sep 14 13:40:57 PDT 2006

frederic heem wrote:
>Unfortunately, making the program setuid is considered insecure.
>Another solution is to use sudo to restrict who can start the service,
> i.e the messagebus

Put the setuid-user program or wrapper in an 0500 messagebus-owned 

But if anyone can start the program (via D-Bus), what's the harm in 
letting anyone start the program directly?

  Thiago Macieira  -  thiago (AT) - thiago (AT)
    PGP/GPG: 0x6EF45358; fingerprint:
    E067 918B B660 DBD1 105C  966C 33F5 F005 6EF4 5358
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url :

More information about the dbus mailing list