Add argument checks to policy <allow>/<deny> rules.

Luiz Augusto von Dentz luiz.dentz at gmail.com
Fri Jun 4 10:21:44 PDT 2010


Hi Pekka,

On Fri, Jun 4, 2010 at 7:58 PM, Pekka Pessi <Pekka.Pessi at nokia.com> wrote:
> Hi all,
>
> The patches add send_signature*, send_arg*, receive_signature, and
> receive_arg* attributes to the <allow> and <deny> policy rules. With the
> additions it is possible to restrict access to certain methods and signals
> based on the argument values.
>
> For example, oFono uses extensively SetProperty methods with signature sv (s
> for property name, v for value), pretty much like o.f.D.Properties.Set. The
> argument-based policy can control write access to individual properties.

I like the idea, I suppose it only works for strings as match rules args right?

> The first two patches just simplify append_rule_from_element() and
> locate_attributes () functions in bus/config-parser.c.
>
> Have a peek in the patches and please push if they seem to be sane enough.
>
> --Pekka Pessi
>
> _______________________________________________
> dbus mailing list
> dbus at lists.freedesktop.org
> http://lists.freedesktop.org/mailman/listinfo/dbus
>



-- 
Luiz Augusto von Dentz
Computer Engineer


More information about the dbus mailing list