File nma-dbus-permissions.patch of Package NetworkManager-gnome
commit 21f593c27fa6568cbd26c222bdde9109803f80e1
Author: dcbw <dcbw@9c6bbc85-7128-0410-879a-9bbc9e4270e9>
Date: Thu Feb 5 20:03:02 2009 +0000
2009-02-05 Dan Williams <dcbw@redhat.com>
* nm-applet.conf
- Update D-Bus rules for newer D-Bus, and deny attempts for non
at_console/non-root processes to ask for a users'
connections which they shouldn't need anyway
git-svn-id: svn+ssh://svn.gnome.org/svn/network-manager-applet/trunk@1133 9c6bbc85-7128-0410-879a-9bbc9e4270e9
diff --git a/ChangeLog b/ChangeLog
index b9ee3d5..0aea065 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,10 @@
+2009-02-05 Dan Williams <dcbw@redhat.com>
+
+ * nm-applet.conf
+ - Update D-Bus rules for newer D-Bus, and deny attempts for non
+ at_console/non-root processes to ask for a users'
+ connections which they shouldn't need anyway
+
2008-12-05 Dan Williams <dcbw@redhat.com>
* src/gconf-helpers/gconf-helpers.c
diff --git a/nm-applet.conf b/nm-applet.conf
index af7c642..ebd7bc6 100644
--- a/nm-applet.conf
+++ b/nm-applet.conf
@@ -2,33 +2,27 @@
"-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
"http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>
- <policy user="root">
- <allow own="org.freedesktop.NetworkManagerUserSettings"/>
+ <policy user="root">
+ <allow own="org.freedesktop.NetworkManagerUserSettings"/>
- <allow send_destination="org.freedesktop.NetworkManagerUserSettings"/>
- <allow send_interface="org.freedesktop.NetworkManagerSettings"/>
+ <allow send_destination="org.freedesktop.NetworkManagerUserSettings"/>
+ </policy>
+ <policy at_console="true">
+ <allow own="org.freedesktop.NetworkManagerUserSettings"/>
- <!-- Only root can get secrets -->
- <allow send_interface="org.freedesktop.NetworkManagerSettings.Secrets"/>
- </policy>
- <policy at_console="true">
- <allow own="org.freedesktop.NetworkManagerUserSettings"/>
+ <allow send_destination="org.freedesktop.NetworkManagerUserSettings"/>
- <allow send_destination="org.freedesktop.NetworkManagerUserSettings"/>
- <allow send_interface="org.freedesktop.NetworkManagerSettings"/>
+ <!-- Only root can get secrets -->
+ <deny send_destination="org.freedesktop.NetworkManagerUserSettings"
+ send_interface="org.freedesktop.NetworkManagerSettings.Connection.Secrets"/>
+ </policy>
+ <policy context="default">
+ <deny send_destination="org.freedesktop.NetworkManagerUserSettings"/>
- <!-- Only root can get secrets -->
- <deny send_interface="org.freedesktop.NetworkManagerSettings.Secrets"/>
- </policy>
- <policy context="default">
- <deny own="org.freedesktop.NetworkManagerUserSettings"/>
+ <allow send_destination="org.freedesktop.NetworkManagerUserSettings"
+ send_interface="org.freedesktop.DBus.Introspectable"/>
+ </policy>
- <allow send_destination="org.freedesktop.NetworkManagerUserSettings"/>
- <allow send_interface="org.freedesktop.NetworkManagerSettings"/>
- <!-- Only root can get secrets -->
- <deny send_interface="org.freedesktop.NetworkManagerSettings.Secrets"/>
- </policy>
-
- <limit name="max_replies_per_connection">512</limit>
+ <limit name="max_replies_per_connection">512</limit>
</busconfig>