2003-09-25 Havoc Pennington <hp@pobox.com>

	* bus/session.conf.in: fix security policy, reported by Seth Nickell

diff --git a/ChangeLog b/ChangeLog
index 6317ef5..dc19e03 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,7 @@
+2003-09-25  Havoc Pennington  <hp@pobox.com>
+
+       * bus/session.conf.in: fix security policy, reported by Seth Nickell
+
 2003-09-25  Seth Nickell  <seth@gnome.org>
 
        * python/examples/example-service.py:

diff --git a/bus/session.conf.in b/bus/session.conf.in
index 4594568..df76d33 100644 (file)
--- a/bus/session.conf.in
+++ b/bus/session.conf.in
@@ -13,9 +13,13 @@
   <servicedir>@EXPANDED_LIBDIR@/dbus-1.0/services</servicedir>
 
   <policy context="default">
-    <!-- Allow everything -->
+    <!-- Allow everything to be sent -->
+    <allow send_destination="*"/>
+    <!-- Allow everything to be received */
     <allow eavesdrop="true"/>
+    <!-- Allow anyone to own anything -->
     <allow own="*"/>
+    <!-- Allow any user to connect -->
     <allow user="*"/>
   </policy>
 

diff --git a/doc/TODO b/doc/TODO
index c70cc92..f1c8e6a 100644 (file)
--- a/doc/TODO
+++ b/doc/TODO
@@ -92,4 +92,6 @@
 
  - dbus_gproxy or dbus_g_proxy?
 
+ - add dbus_message_has_path(), maybe has_member/interface
+
  - The OBJECT_PATH type is not documented in the spec.