activation-helper: Ensure DBUS_STARTER_ADDRESS is set correctly
authorGeoffrey Thomas <gthomas@mokafive.com>
Fri, 28 Sep 2012 05:02:06 +0000 (22:02 -0700)
committerColin Walters <walters@verbum.org>
Fri, 28 Sep 2012 16:08:28 +0000 (12:08 -0400)
commitf68dbdc3e6f895012ce33939fb524accf31bcca5
tree339a3793646cf9e12aa1f5bf3e0e6a295f8702a7
parent57ae3670508bbf4ec57049de47c9cae727a64802
activation-helper: Ensure DBUS_STARTER_ADDRESS is set correctly

The fix for CVE-2012-3524 filters out all environment variables if
libdbus is used from a setuid program, to prevent various spoofing
attacks.

Unfortunately, the activation helper is a setuid program linking
libdbus, and this creates a regression for launched programs using
DBUS_STARTER_ADDRESS, since it will no longer exist.

Fix this by hardcoding the starter address to the default system bus
address.

Signed-off-by: Geoffrey Thomas <gthomas@mokafive.com>
Signed-off-by: Colin Walters <walters@verbum.org>
bus/activation-helper.c