everyone is allowed to call so org.freedesktop.Hal.Device.SetProperty*

David Zeuthen david at fubar.dk
Sat Sep 25 08:26:18 PDT 2004


On Sat, 2004-09-25 at 11:05 -0400, Joe Shaw wrote:
> On Sat, 2004-09-25 at 12:47 +0200, Sjoerd Simons wrote:
> >   I noticed that currently everyone is allowed to call the SetProperty* dbus
> >   methods on org.freedesktop.Hal.Device. Is this really a good id, i think
> >   applications should be able to trust the information hal provides. Which this
> >   basically undermines imho.
>
> So, yeah, you're right: it's not the safest thing in the world right
> now, and it's something that will need to be fixed before HAL is
> production quality.
> 

That's right. I'm going to fix this very soon by only allowing the super
user to write properties (which e.g. hal-hotplug-map is fortunately). We
can punch holes later; we've got the infrastructure in D-BUS to do this.

David


_______________________________________________
hal mailing list
hal at freedesktop.org
http://freedesktop.org/mailman/listinfo/hal



More information about the Hal mailing list