From: Lukasz Skalski Date: Mon, 5 Jan 2015 13:45:55 +0000 (+0100) Subject: bus-proxyd: don't allow to acquire org.freedesktop.DBus name X-Git-Tag: v219~689 X-Git-Url: https://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=commitdiff_plain;h=30897dd72b2fb6062d4857abc6b9295b17fda0a4 bus-proxyd: don't allow to acquire org.freedesktop.DBus name --- diff --git a/src/bus-proxyd/bus-proxyd.c b/src/bus-proxyd/bus-proxyd.c index a7818f546..fc70cce94 100644 --- a/src/bus-proxyd/bus-proxyd.c +++ b/src/bus-proxyd/bus-proxyd.c @@ -829,6 +829,10 @@ static int process_driver(sd_bus *a, sd_bus *b, sd_bus_message *m, Policy *polic if (r < 0) return synthetic_reply_method_errno(m, r, NULL); + if (streq(name, "org.freedesktop.DBus")) + return synthetic_reply_method_error(m, &SD_BUS_ERROR_MAKE_CONST(SD_BUS_ERROR_INVALID_ARGS, + "Connection is not allowed to own the org.freedesktop.DBus service.")); + if (policy && !policy_check_own(policy, ucred->uid, ucred->gid, name)) return synthetic_reply_method_errno(m, -EPERM, NULL);