New policy type to check client credentials?

[Markku Savela]

Havoc Pennington wrote:

> Just posting to the list is fine. I think depending on bleeding-edge
> libraries and kernel patches is a problem for us; it would have to be
> optional in configure, and we would want to see some indication from
> the kernel developers and other people that they will be using the
> library and the kernel patches.

Ok, attached

dbus-patch-txt.gz, based on dbus-1.2.4 source from Ubuntu... should not 
be that different, at least the idea should become clear. I've made some 
attempt to patch the configure.in too, but it may not be as elegant as 
people would want... [this version has less testing, as I rewrote this 
patch recently].

libcreds1_1.0.tar.gz is the prototype credentials lib based on 
/proc/<pid>/status parsing (no kernel changes needed). Implementation 
does require libcap2 version... (also, needs all the automake tools to 
build, as I do not include any generated files -- only configure.ac and 
Makefile.am).
-------------- next part --------------
A non-text attachment was scrubbed...
Name: dbus-patch.txt.gz
Type: application/x-gzip
Size: 3085 bytes
Desc: not available
Url : http://lists.freedesktop.org/archives/dbus/attachments/20090203/6bb80e80/attachment.bin 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: libcreds1_1.0.tar.gz
Type: application/x-gzip
Size: 8298 bytes
Desc: not available
Url : http://lists.freedesktop.org/archives/dbus/attachments/20090203/6bb80e80/attachment-0001.bin