[Debian-olpc-devel] Bug#510657: Bug#510657: sugar: /etc/dbus-1/system.d file needs alterations for fd.o #18961

Jonas Smedegaard dr at jones.dk
Sun Jan 4 20:01:12 UTC 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sun, Jan 04, 2009 at 07:24:09PM +0000, Simon McVittie wrote:
>On Sun, 04 Jan 2009 at 17:05:56 +0100, Jonas Smedegaard wrote:
>> On Sun, Jan 04, 2009 at 02:57:48PM +0000, Simon McVittie wrote:
>> >On Sun, 04 Jan 2009 at 04:12:08 +0100, Jonas Smedegaard wrote:
>> >> Ok, I read the fd.org bugreport. But I fail to understand what is 
>> >> wrong and should be fixed with 
>> >> /etc/dbus-1/system.d/NetworkManagerInfo.conf - it seems to me that 
>> >> all entries contain both send_interface and send_destination as 
>> >> described in that bugreport.
>> >
>> ><allow send_foo="a"/> <allow send_bar="b"/> allows anything where
>> >foo=a *or* bar=b.
>> >
>> ><allow send_foo="a" send_bar="b"/> allows anything where foo=a *and* bar=b.
>> 
>> I recognize none of above patterns in the sugar package.
>
>On a lenny system with sugar freshly installed, I get the former pattern
>with foo=destination, bar=interface, a=b=org.freedesktop.NetworkManagerInfo:

Ahhh, I see it now. Stupid me :-P


>Each <policy> should probably look more like this:
>
>        <policy user="root">
>                <allow own="org.freedesktop.NetworkManagerInfo"/>
>                <allow send_destination="org.freedesktop.NetworkManagerInfo"/>
>        </policy>

Right. I get it now. Nothing wrong with your earlier explanations 
either, my mind simply blocked somehow.


>I've uploaded a (source + i386) version of dbus targeted for lenny
>to <http://people.debian.org/~smcv/dbus-cve-2008-4311/> - amd64 binaries to
>follow soon. Please try out sugar's NetworkManager integration with that
>version and make sure it can still work.

Does that mean that I should not simply upload a fixed release to 
unstable, but wait and depend on that newer release of dbus?

Or (looking at the changelog entry now) does it perhaps mean that my 
change will work both now and (hopefully) with your new release of dbus, 
but that my old sugar version will _not_ work with newer dbus?


  - Jonas

- -- 
* Jonas Smedegaard - idealist og Internet-arkitekt
* Tlf.: +45 40843136  Website: http://dr.jones.dk/

  [x] quote me freely  [ ] ask before reusing  [ ] keep private
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAklhFYgACgkQn7DbMsAkQLh7EgCdENf/q8zkLEC2QL1Qsim4pzVi
Vv0AnRHjWtmoHkQT75alk3kbQCkkdygW
=/DUv
-----END PGP SIGNATURE-----





More information about the Debian-olpc-devel mailing list