[PATCH] Hal privilige seperation

Artem Kachitchkine Artem.Kachitchkin at Sun.COM
Sat Jan 21 15:25:02 PST 2006


> Also we probably only want to accept
> connections from uid 0 as an extra check just in case someone guesses
> the address..

This is especially important for OSes without abstract sockets - which 
is pretty much OS except Linux - where HAL's p2p sockets will actually 
appear in /tmp.

A more portable and secure way to maintain private connections would be 
socketpair(), passing descriptors through fork inheritance. One of these 
days I'll think about adding this to D-BUS.

-Artem.


More information about the hal mailing list