Application authorisations

Bastien Nocera hadess at hadess.net
Thu Apr 29 06:15:02 PDT 2010


On Thu, 2010-04-29 at 07:55 -0400, Daniel J Walsh wrote:
<snip>
> If you really want to secure it, you can use SELinux/Polkit/dbus to put
> a label on the executable on the client side and only allow clients with
> this label to communicate with the server through dbus.

Is that something that's possible at the dbus level, or would it be
implemented in polkit or the application? Can't a normal user change the
labels of the binaries they own?



More information about the dbus mailing list