From: Witold Sowa <witold.sowa@gmail.com>
Date: Mon, 16 Nov 2009 11:25:51 +0000 (+0200)
Subject: dbus: Allow only root to receive signals
X-Git-Tag: hostap_0_7_0~35
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=bd4ce0662974be99c941673233f98b718f8ff8ad;p=thirdparty%2Fhostap.git

dbus: Allow only root to receive signals

Change the dbus policy file to only allow root applications to receive
signals from wpa_supplicant. This keeps WPS Credentials data secret
from non-root listeners.
---

diff --git a/wpa_supplicant/dbus-wpa_supplicant.conf b/wpa_supplicant/dbus-wpa_supplicant.conf
index 1d4368e5a..c091234f7 100644
--- a/wpa_supplicant/dbus-wpa_supplicant.conf
+++ b/wpa_supplicant/dbus-wpa_supplicant.conf
@@ -12,7 +12,7 @@
 
                 <allow send_destination="fi.w1.wpa_supplicant1"/>
                 <allow send_interface="fi.w1.wpa_supplicant1"/>
-
+                <allow receive_sender="fi.w1.wpa_supplicant1" receive_type="signal"/>
         </policy>
         <policy context="default">
                 <deny own="fi.epitest.hostap.WPASupplicant"/>
@@ -22,5 +22,6 @@
                 <deny own="fi.w1.wpa_supplicant1"/>
                 <deny send_destination="fi.w1.wpa_supplicant1"/>
                 <deny send_interface="fi.w1.wpa_supplicant1"/>
+                <deny receive_sender="fi.w1.wpa_supplicant1" receive_type="signal"/>
         </policy>
 </busconfig>