From: Mike Yuan <me@yhndnzj.com>
Date: Sun, 15 Feb 2026 04:24:56 +0000 (+0100)
Subject: sd-varlink: also validate peer ucred for SD_VARLINK_SERVER_MYSELF_ONLY
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=122bde2c457095cb57b2b4fedc58b133777a5787;p=thirdparty%2Fsystemd.git

sd-varlink: also validate peer ucred for SD_VARLINK_SERVER_MYSELF_ONLY
---

diff --git a/src/libsystemd/sd-varlink/sd-varlink.c b/src/libsystemd/sd-varlink/sd-varlink.c
index b04a43a35c1..c7f6074617a 100644
--- a/src/libsystemd/sd-varlink/sd-varlink.c
+++ b/src/libsystemd/sd-varlink/sd-varlink.c
@@ -3601,7 +3601,7 @@ _public_ int sd_varlink_server_add_connection_pair(
         assert_return(input_fd >= 0, -EBADF);
         assert_return(output_fd >= 0, -EBADF);
 
-        if ((server->flags & (SD_VARLINK_SERVER_ROOT_ONLY|SD_VARLINK_SERVER_ACCOUNT_UID)) != 0) {
+        if ((server->flags & (SD_VARLINK_SERVER_ROOT_ONLY|SD_VARLINK_SERVER_MYSELF_ONLY|SD_VARLINK_SERVER_ACCOUNT_UID)) != 0) {
 
                 if (override_ucred)
                         ucred = *override_ucred;