From: Simon McVittie Date: Wed, 19 Jul 2017 14:52:12 +0000 (+0100) Subject: dbus-daemon(1): Be more truthful about the default policy X-Git-Tag: dbus-1.11.18~21 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=13a155c5144342b7e02139fb0696e584cc3ad8cb;p=thirdparty%2Fdbus.git dbus-daemon(1): Be more truthful about the default policy We don't allow sending unrequested replies, but the documentation implied that we did. Signed-off-by: Simon McVittie Reviewed-by: Thiago Macieira Bug: https://bugs.freedesktop.org/show_bug.cgi?id=92853 --- diff --git a/doc/dbus-daemon.1.xml.in b/doc/dbus-daemon.1.xml.in index 447b7fd26..dcaba4840 100644 --- a/doc/dbus-daemon.1.xml.in +++ b/doc/dbus-daemon.1.xml.in @@ -779,9 +779,13 @@ they are analogous to a firewall in that they allow expected traffic and prevent unexpected traffic. -Currently, the system bus has a default-deny policy for sending method calls -and owning bus names. Everything else, in particular reply messages, receive -checks, and signals has a default allow policy. + + Currently, the system bus has a default-deny policy for sending method calls + and owning bus names, and a default-allow policy for receiving messages, + sending signals, and sending a single success or error reply for each + method call that does not have the NO_REPLY flag. + Sending more than the expected number of replies is not allowed. + In general, it is best to keep system services as small, targeted programs which