Bug#510636: libosso: Has a dbus config file which circumvents all security messages on the system bus

[Thijs Kinkhorst]

Hi, Matthew,

> Tags: security
>
> libosso1 ships /etc/dbus-1/system.d/libosso.conf which turns off all the
> security checks on the system bus by allowing all messages from everyone
> to everyone else. This is bad mkay?

As I understand it, "Maemo" is a kind of handheld device platform. I do not 
understand yet how this would be a security issue on such a device, can you 
clarify?


cheers,
Thijs
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 481 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/pkg-maemo-maintainers/attachments/20090104/0e5f513b/attachment.pgp