Debian Bug report logs - #510788
odccm: /etc/dbus-1/system.d file needs alterations for fd.o #18961

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Simon McVittie <smcv@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: odccm: /etc/dbus-1/system.d file needs alterations for fd.o #18961

Date: Sun, 4 Jan 2009 21:33:42 +0000

[Message part 1 (text/plain, inline)]

Package: odccm
Version: 0.11.1-2
Severity: normal
User: pkg-utopia-maintainers@lists.alioth.debian.org
Usertags: fdo-18961

odccm's D-Bus system.d config should be updated to fix
non-deterministic allow/deny for messages with no interface; the D-Bus
upstream recommendation seems to be that every allow or deny rule with
send_interface="..." should have a suitable send_destination attribute too.

http://bugs.freedesktop.org/show_bug.cgi?id=18961 is the D-Bus bug tracking
this; there have also been discussions on the D-Bus mailing list.

Please test the resulting package against the dbus package from
http://people.debian.org/~smcv/dbus-cve-2008-4311/ (you might be better
off waiting until hal's current RC bug has been fixed before you upgrade);
as far as I can tell, it *should* be OK with deny-by-default, but it
might not be.

Regards from the Cambridge BSP,
    Simon

[signature.asc (application/pgp-signature, inline)]

Message #10 received at 510788@bugs.debian.org (full text, mbox, reply):

From: Jonny Lamb <jonny@debian.org>

To: Simon McVittie <smcv@debian.org>, 510788@bugs.debian.org

Cc: control@bugs.debian.org

Subject: Re: Bug#510788: odccm: /etc/dbus-1/system.d file needs alterations for fd.o #18961

Date: Sun, 4 Jan 2009 21:46:06 +0000

[Message part 1 (text/plain, inline)]

forcemerge 510698 510788
kthxbye

On Sun, Jan 04, 21:33:42 +0000, Simon McVittie wrote:
> odccm's D-Bus system.d config should be updated to fix
> non-deterministic allow/deny for messages with no interface; the D-Bus
> upstream recommendation seems to be that every allow or deny rule with
> send_interface="..." should have a suitable send_destination attribute too.

This has already been reported by Matthew Johnson this morning. My
0.11.1-4 upload this evening should fix this. Feel free to re-open this
bug if I noobed it up though.

Thanks,

-- 
Jonny Lamb, UK
jonny@debian.org

[signature.asc (application/pgp-signature, inline)]

Send a report that this bug log contains spam.