hal ChangeLog,1.344,1.345

[David Zeuthen]

Update of /cvs/hal/hal
In directory gabe:/tmp/cvs-serv20216

Modified Files:
	ChangeLog 
Log Message:
2004-10-14  David Zeuthen  <davidz at redhat.com>

	Patch from Steve Grubb (linux_4ever at yahoo.com).

	* hald/linux/net_class_device.c (link_detection_data_ready): The
	hal daemon does not check the sender's PID for netlink packets.
	Netlink packets can be sent by any user with local access to the
	system. Kernel originating packets have a PID of 0, while user
	space originating packets are > 0. Without checking this, users
	may send messages to hald that cause daemons using dbus to take
	inappropriate actions.



Index: ChangeLog
===================================================================
RCS file: /cvs/hal/hal/ChangeLog,v
retrieving revision 1.344
retrieving revision 1.345
diff -u -d -r1.344 -r1.345
--- ChangeLog	14 Oct 2004 18:37:27 -0000	1.344
+++ ChangeLog	14 Oct 2004 18:41:27 -0000	1.345
@@ -1,5 +1,17 @@
 2004-10-14  David Zeuthen  <davidz at redhat.com>
 
+	Patch from Steve Grubb (linux_4ever at yahoo.com).
+
+	* hald/linux/net_class_device.c (link_detection_data_ready): The
+	hal daemon does not check the sender's PID for netlink packets.
+	Netlink packets can be sent by any user with local access to the
+	system. Kernel originating packets have a PID of 0, while user
+	space originating packets are > 0. Without checking this, users
+	may send messages to hald that cause daemons using dbus to take
+	inappropriate actions.
+
+2004-10-14  David Zeuthen  <davidz at redhat.com>
+
 	* configure.in: Add fstab-sync.8 to AC_OUTPUT
 	
 	* doc/conf/storage-non-fixed.fdi: New file, example