[PATCH] More lenient D-Bus policy

Johannes Berg johannes
Mon May 26 03:08:14 PDT 2014


On Mon, 2014-05-26 at 10:56 +0100, Zeeshan Ali (Khattak) wrote:
> On Mon, May 26, 2014 at 9:28 AM, Johannes Berg
> <johannes at sipsolutions.net> wrote:
> > On Sun, 2014-05-25 at 12:04 +0100, Zeeshan Ali (Khattak) wrote:
> >
> >> I'm afraid you'll have to do all properties access control from the
> >> code instead. I can still provide a patch that only gives access to
> >> signals on the above objects and I can even make it more specific if
> >> we want that?
> >
> > Well, the signals have the same problem really - there's a "new blob"
> > signal I believe which probably has all the blob properties.
> 
> As I said:
> 
> 1. You can define a refined policy for signals so thats fixable.
> 2. For properties, you can deny access from code.

Ok.

> BTW, can we please not talk in terms of facts and keep 'I believe' and
> 'probably' out of this discussion?

Not really, that'd mean I have to reread the whole code for every
email :)

johannes




More information about the Hostap mailing list