[RFC] Controlling the ability to start D-Bus services

Thiago Macieira thiago at kde.org
Wed Oct 21 15:30:15 PDT 2015


Em qua 21 out 2015, às 18:56:57, Simon McVittie escreveu:
> Any opinions on this?

I'd favour taking absolutely no action. This is not a bug, even if unexpected. 
And when kdbus comes, there will only be activation via non-D-Bus, out-of-band 
mechanisms (systemd) or by way of a special process already owning the name. 
That latter situation would be equivalent to today's auto activation, but 
since there already is a separate process, a security-conscious deployment 
would make that target process already assume the necessary credentials so 
that the kernel routing allows or denies the traffic in the first place.
-- 
Thiago Macieira - thiago (AT) macieira.info - thiago (AT) kde.org
   Software Architect - Intel Open Source Technology Center
      PGP/GPG: 0x6EF45358; fingerprint:
      E067 918B B660 DBD1 105C  966C 33F5 F005 6EF4 5358



More information about the dbus mailing list