home: mark various bus messages we write user records to as sensitive

let's make sure that when we append potentially sensitive data to a bus
message we set the sensitive flag on the message object.

diff --git a/src/home/home-util.c b/src/home/home-util.c
index 69ab645484d8377ed0629015d73fc5249c6f9c32..51406fd234567a7421eaae33f4fb9dcd2653f67e 100644 (file)
--- a/src/home/home-util.c
+++ b/src/home/home-util.c
@@ -124,6 +124,8 @@ int bus_message_append_secret(sd_bus_message *m, UserRecord *secret) {
         if (r < 0)
                 return r;
 
+        (void) sd_bus_message_sensitive(m);
+
         return sd_bus_message_append(m, "s", formatted);
 }
 

diff --git a/src/home/homectl.c b/src/home/homectl.c
index 9b614325a50b9eeebd1693047bdf6bdbf57674fd..c98bf8b5408f6d3571b7749144408f670f8f14f2 100644 (file)
--- a/src/home/homectl.c
+++ b/src/home/homectl.c
@@ -1435,6 +1435,8 @@ static int create_home(int argc, char *argv[], void *userdata) {
                 if (r < 0)
                         return bus_log_create_error(r);
 
+                (void) sd_bus_message_sensitive(m);
+
                 r = sd_bus_message_append(m, "s", formatted);
                 if (r < 0)
                         return bus_log_create_error(r);
@@ -1637,6 +1639,8 @@ static int update_home(int argc, char *argv[], void *userdata) {
                 if (r < 0)
                         return r;
 
+                (void) sd_bus_message_sensitive(m);
+
                 r = sd_bus_message_append(m, "s", formatted);
                 if (r < 0)
                         return bus_log_create_error(r);