[RFC] Controlling the ability to start D-Bus services
Thiago Macieira
thiago at kde.org
Wed Oct 21 15:30:15 PDT 2015
Em qua 21 out 2015, às 18:56:57, Simon McVittie escreveu:
> Any opinions on this?
I'd favour taking absolutely no action. This is not a bug, even if unexpected.
And when kdbus comes, there will only be activation via non-D-Bus, out-of-band
mechanisms (systemd) or by way of a special process already owning the name.
That latter situation would be equivalent to today's auto activation, but
since there already is a separate process, a security-conscious deployment
would make that target process already assume the necessary credentials so
that the kernel routing allows or denies the traffic in the first place.
--
Thiago Macieira - thiago (AT) macieira.info - thiago (AT) kde.org
Software Architect - Intel Open Source Technology Center
PGP/GPG: 0x6EF45358; fingerprint:
E067 918B B660 DBD1 105C 966C 33F5 F005 6EF4 5358
More information about the dbus
mailing list