eavesdrop in dbus policy

Fri Mar 27 09:00:15 PDT 2015

On Friday 27 March 2015 09:20:32 Aubert Malek wrote:
> What is different with Become Monitor? I mean, this method will be used by a
> root user too. How does this way avoid security vulnerability?

The security issue was in "root user". If the caller is already root, they can 
ptrace or kill the dbus-daemon. Or any other process, for that matter...
-- 
Thiago Macieira - thiago (AT) macieira.info - thiago (AT) kde.org
   Software Architect - Intel Open Source Technology Center
      PGP/GPG: 0x6EF45358; fingerprint:
      E067 918B B660 DBD1 105C  966C 33F5 F005 6EF4 5358