- Jan 07, 2009
-
-
Colin Walters authored
-
Colin Walters authored
-
Colin Walters authored
* configure.in: Tweak libxml/expat detection and handling.
-
Signed-off-by: Colin Walters <walters@verbum.org>
-
* dbus/dbus-marshal-validate.c: If an array is fixed size, skip validation Signed-off-by: Colin Walters <walters@verbum.org>
-
* bus/bus.c: Initialize AVC earlier: http://lists.freedesktop.org/archives/dbus/2008-October/010493.html Signed-off-by: Colin Walters <walters@verbum.org>
-
* tools/dbus-print-message.c: Print serial too. Signed-off-by: Colin Walters <walters@verbum.org>
-
Signed-off-by: Colin Walters <walters@verbum.org>
-
Signed-off-by: Colin Walters <walters@verbum.org>
-
Signed-off-by: Colin Walters <walters@verbum.org>
-
The AC_CANONICAL_TARGET macro and the $target_os variables are used for the target of compilers and other code-generation tools, and should not be used during cross-compile of generic software. Replace them with AC_CANONICAL_HOST and $host_os instead, as they should have been from the start. For a breakdown of what host, build and target machines are, please see http://blog.flameeyes.eu/s/canonical-target .
-
Signed-off-by: Colin Walters <walters@verbum.org>
-
Colin Walters authored
Important compiler warnings were being lost in the noise from warnings we know about but aren't problems, and moreover made using -Werror difficult. Now we expect *all* developers and testers to be using -Werror.
-
Colin Walters authored
-
- Dec 18, 2008
-
-
Colin Walters authored
-
Colin Walters authored
The requested_reply field is necessary in send denials too because it's used in the policy language. The connection loginfo lack in "would deny" was just an oversight.
-
Colin Walters authored
Extend the current security logs with even more relevant information than just the message content. This requires some utility code to look up and cache (as a string) the data such as the uid/pid/command when a connection is authenticated.
-
Colin Walters authored
We are creating a new stream off of the 1.2.4 release.
-
- Dec 16, 2008
-
-
Colin Walters authored
This branch is intended to keep the old default-permissive.
-
Colin Walters authored
-
Colin Walters authored
This lets us have a backwards compatibility allow rule but still easily see when that rule is being used.
-
- Dec 12, 2008
-
-
Colin Walters authored
It's part of the security check, we should have it in the log.
-
Colin Walters authored
We need to start logging denials so that they become more easily trackable and debuggable.
-
Colin Walters authored
The former was too reliant on old bugs and was generally unclear. This one makes explicit exactly what is allowed and not.
-
- Dec 09, 2008
-
-
Colin Walters authored
-
Colin Walters authored
-
Colin Walters authored
We need to fix all of the bare send_interface rules; see: https://bugs.freedesktop.org/show_bug.cgi?id=18961
-
Colin Walters authored
We need some sort of general advice here.
-
Colin Walters authored
Our previous fix went too far towards lockdown; many things rely on signals to work, and there's no really good reason to restrict which signals can be emitted on the bus because we can't tie them to a particular sender.
-
- Dec 05, 2008
-
-
Colin Walters authored
-
The previous rule <allow send_requested_reply="true"/> was actually applied to all messages, even if they weren't a reply. This meant that in fact the default DBus policy was effectively allow, rather than deny as claimed. This fix ensures that the above rule only applies to actual reply messages. Signed-off-by: Colin Walters <walters@verbum.org>
-
Colin Walters authored
The tmp-session-like-system.conf bus configuration has a security policy intended to mirror that of the system bus. This allows testing policy rules.
-
- Oct 06, 2008
-
-
Colin Walters authored
-
Colin Walters authored
-
- Oct 01, 2008
-
-
* dbus/dbus-marshal-recursive.c: A stray comma between two string literals caused incorrect output and a compiler warning. Signed-off-by: Colin Walters <walters@verbum.org>
-
* dbus/dbus-credentials.h: Add a prototype for _dbus_credentials_add_adt_audit_data() Signed-off-by: Colin Walters <walters@verbum.org>
-
Colin Walters authored
* dbus/dbus-marshal-validate.c: Ensure we validate a basic type before calling is_basic on it. * dbus-marshal-validate-util.c: Test.
-
* dbus/dbus-sysdeps-unix.c: * dbus/dbus-sysdeps-util-unix.c: Cast return from sysconf temporarily so we actually see -1. Signed-off-by: Colin Walters <walters@verbum.org>
-
Signed-off-by: Colin Walters <walters@verbum.org>
-
Dbus is doing atomic file updates by copying them, changing the copy, and re-naming them. However, it does not synchronize the file before re-naming, which results in corruption in case of unclean reboots. The reason for this is that file-systems have write-back cache and they postpone writing data to the media. This patch adds the missed fsync() for the Unix part. I do not have windows so cannot provide a windows port fix. Signed-off-by: Artem Bityutskiy <Artem.Bityutskiy@nokia.com> Signed-off-by: Colin Walters <walters@verbum.org>
-