Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
SUSE:SLE-15-SP2:Update
keepalived
0001-dbus-fix-policy-to-not-be-overly-broad.patch
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File 0001-dbus-fix-policy-to-not-be-overly-broad.patch of Package keepalived
From 7977fec0be89ae6fe87405b3f8da2f0b5e415e3d Mon Sep 17 00:00:00 2001 From: Vincent Bernat <vincent@bernat.ch> Date: Tue, 23 Nov 2021 06:50:59 +0100 Subject: [PATCH 1/1] dbus: fix policy to not be overly broad The DBus policy did not restrict the message destination, allowing any user to inspect and manipulate any property. Signed-off-by: Vincent Bernat <vincent@bernat.ch> --- keepalived/dbus/org.keepalived.Vrrp1.conf | 13 ++++++++----- 1 file changed, 8 insertions(+), 5 deletions(-) diff --git a/keepalived/dbus/org.keepalived.Vrrp1.conf b/keepalived/dbus/org.keepalived.Vrrp1.conf index 2b78a575..b5ced608 100644 --- a/keepalived/dbus/org.keepalived.Vrrp1.conf +++ b/keepalived/dbus/org.keepalived.Vrrp1.conf @@ -3,12 +3,15 @@ "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd"> <busconfig> <policy user="root"> - <allow own="org.keepalived.Vrrp1"/> - <allow send_destination="org.keepalived.Vrrp1"/> + <allow own="org.keepalived.Vrrp1" /> + <allow send_destination="org.keepalived.Vrrp1" /> </policy> <policy context="default"> - <allow send_interface="org.freedesktop.DBus.Introspectable" /> - <allow send_interface="org.freedesktop.DBus.Peer" /> - <allow send_interface="org.freedesktop.DBus.Properties" /> + <allow send_destination="org.keepalived.Vrrp1" + send_interface="org.freedesktop.DBus.Introspectable" /> + <allow send_destination="org.keepalived.Vrrp1" + send_interface="org.freedesktop.DBus.Peer" /> + <allow send_destination="org.keepalived.Vrrp1" + send_interface="org.freedesktop.DBus.Properties" /> </policy> </busconfig> -- 2.35.3
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor