Loadable security modules for D-Bus

Marcel Holtmann marcel at holtmann.org
Tue Jan 10 14:43:11 PST 2012


Hi Colin,

> > Coming to think about it, I really prefer a method where systemd is able
> > to load a system bus owning security policy based on either UID or
> > cgroup into the dbus-daemon and that is it. And don't we already have
> > the system bus name in the unit file anyway for autostart purposes?
> 
> I agree with this.  However there is nontrivial work to do to get
> projects to stop using the built-in security model (avahi, ConsoleKit,
> NetworkManager to start).

but just putting this off and entertaining the idea of pluggable
security modules in D-Bus sounds even worse to me.

Regards

Marcel




More information about the dbus mailing list