everyone is allowed to call so org.freedesktop.Hal.Device.SetProperty*

[David Zeuthen]

On Sat, 2004-09-25 at 11:05 -0400, Joe Shaw wrote:
> On Sat, 2004-09-25 at 12:47 +0200, Sjoerd Simons wrote:
> >   I noticed that currently everyone is allowed to call the SetProperty* dbus
> >   methods on org.freedesktop.Hal.Device. Is this really a good id, i think
> >   applications should be able to trust the information hal provides. Which this
> >   basically undermines imho.
>
> So, yeah, you're right: it's not the safest thing in the world right
> now, and it's something that will need to be fixed before HAL is
> production quality.
> 

That's right. I'm going to fix this very soon by only allowing the super
user to write properties (which e.g. hal-hotplug-map is fortunately). We
can punch holes later; we've got the infrastructure in D-BUS to do this.

David


_______________________________________________
hal mailing list
hal at freedesktop.org
http://freedesktop.org/mailman/listinfo/hal