On Wed, 2009-02-25 at 09:33 -0500, Colin Walters wrote: > Hi, > > I plan to switch the DBus system bus away from the "permissive" > release to the one which closes > https://bugs.freedesktop.org/show_bug.cgi?id=18229 > relatively soon in the Fedora 11 tree. > > I've been going through bugzillas and getting policies upstream for a > while, and I think the vast majority of things are fixed now. The > permissive mode has been in rawhide for some time, and will have been > generating messages of the form: > > Feb 2 12:17:38 space-ghost dbus: Rejected send message, 20 > matched rules; type="method_return", sender=":1.19" (uid=0 pid=2863 > comm="/usr/sbin/wpa_supplicant -c /etc/wpa_supplicant/wp") > interface="(unset)" member="(unset)" error name="(unset)" > requested_reply=0 destination=":1.18" (uid=0 pid=2852 > comm="NetworkManager --pid-file=/var/run/NetworkManager/")) > > in syslog. If you're seeing these and I didn't find your bugzilla, > and don't know how to fix, please ask for help at > dbus@xxxxxxxxxxxxxxxxxxxxx or #dbus on Freenode. This is a useful chunk of work that: - touches lots of packages, - helps upstream, - potentially breaks things - may need a contingency plan Should it thus be a "feature" ("ImprovedDBusSecurity"?), so that: - it can be mentioned in release notes - can involve the Fedora QA team e.g. have a test day - can be mentioned in community marketing of Fedora etc? Hope this helps Dave -- fedora-devel-list mailing list fedora-devel-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-devel-list
