]> git.ipfire.org Git - thirdparty/systemd.git/commit
machined: in --user mode, restrict register access to our own UID, and that's it
authorLennart Poettering <lennart@poettering.net>
Wed, 26 Nov 2025 10:16:46 +0000 (11:16 +0100)
committerYu Watanabe <watanabe.yu+github@gmail.com>
Tue, 2 Dec 2025 04:34:20 +0000 (13:34 +0900)
commit722dc73699f63118e443dbdfaff1190db6a614b5
treefab46c28738745bbec4057a223a053ec937b1053
parent81e79ee499e3495f5fe01be5fbd9ec058c9cee60
machined: in --user mode, restrict register access to our own UID, and that's it

This is a follow-up for 119d332d9c2cf1974b235c8d9e4e3ad821cf436a and
ensures the check only is applied to the system instance of machined. It
doesn't really apply to the per-user instance, because we never want to
permit differently privileged clients access anyway.

(The process_is_owned_by_uid() call might fail if invoked unpriv, hence
there's value in not calling it if machined runs in --user mode, it's
what makes machined actually work)
src/machine/machined-dbus.c