From: Lukasz Skalski Date: Mon, 5 Jan 2015 13:45:55 +0000 (+0100) Subject: bus-proxyd: don't allow to acquire org.freedesktop.DBus name X-Git-Tag: v219~689 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=30897dd72b2fb6062d4857abc6b9295b17fda0a4;p=thirdparty%2Fsystemd.git bus-proxyd: don't allow to acquire org.freedesktop.DBus name --- diff --git a/src/bus-proxyd/bus-proxyd.c b/src/bus-proxyd/bus-proxyd.c index a7818f54622..fc70cce9402 100644 --- a/src/bus-proxyd/bus-proxyd.c +++ b/src/bus-proxyd/bus-proxyd.c @@ -829,6 +829,10 @@ static int process_driver(sd_bus *a, sd_bus *b, sd_bus_message *m, Policy *polic if (r < 0) return synthetic_reply_method_errno(m, r, NULL); + if (streq(name, "org.freedesktop.DBus")) + return synthetic_reply_method_error(m, &SD_BUS_ERROR_MAKE_CONST(SD_BUS_ERROR_INVALID_ARGS, + "Connection is not allowed to own the org.freedesktop.DBus service.")); + if (policy && !policy_check_own(policy, ucred->uid, ucred->gid, name)) return synthetic_reply_method_errno(m, -EPERM, NULL);