From: Lennart Poettering <lennart@poettering.net>
Date: Wed, 6 May 2020 15:54:35 +0000 (+0200)
Subject: homed: open up home dir Acquire operation to unpriv clients
X-Git-Tag: v246-rc1~426
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=ba876a4c8d356848d1c5f0c176427f51c01779de;p=thirdparty%2Fsystemd.git

homed: open up home dir Acquire operation to unpriv clients

Apparently unpriv clients expect to be able to auth via PAM. Kinda
sucks. But it is what it is. Hence open this up.

This shouldn't be too bad in effect since clients after all need to
provide security creds for unlocking the home dir, in order to misuse
this.

Fixes: #15072
---

diff --git a/src/home/homed-manager-bus.c b/src/home/homed-manager-bus.c
index 1b8ec0c7386..6306e12d394 100644
--- a/src/home/homed-manager-bus.c
+++ b/src/home/homed-manager-bus.c
@@ -789,7 +789,7 @@ static const sd_bus_vtable manager_vtable[] = {
                                  "h",
                                  SD_BUS_PARAM(send_fd),
                                  method_acquire_home,
-                                 SD_BUS_VTABLE_SENSITIVE),
+                                 SD_BUS_VTABLE_UNPRIVILEGED|SD_BUS_VTABLE_SENSITIVE),
         SD_BUS_METHOD_WITH_NAMES("RefHome",
                                  "sb",
                                  SD_BUS_PARAM(user_name)