activation-helper: Ensure DBUS_STARTER_ADDRESS is set correctly
authorGeoffrey Thomas <gthomas@mokafive.com>
Fri, 28 Sep 2012 05:02:06 +0000 (22:02 -0700)
committerColin Walters <walters@verbum.org>
Fri, 28 Sep 2012 16:55:38 +0000 (12:55 -0400)
commitfc4547fe089136f119b49dd067a3cb876d487893
tree7df652b24b585905b31dbd4c224678f4753ea10b
parent9a0c289be67735870d208e2dca2b679da0c31c41
activation-helper: Ensure DBUS_STARTER_ADDRESS is set correctly

The fix for CVE-2012-3524 filters out all environment variables if
libdbus is used from a setuid program, to prevent various spoofing
attacks.

Unfortunately, the activation helper is a setuid program linking
libdbus, and this creates a regression for launched programs using
DBUS_STARTER_ADDRESS, since it will no longer exist.

Fix this by hardcoding the starter address to the default system bus
address.

Signed-off-by: Geoffrey Thomas <gthomas@mokafive.com>
Signed-off-by: Colin Walters <walters@verbum.org>
bus/activation-helper.c