dbus-policy-without-send-destination



Hi everyone,

when building NetworkManager on Debian, I get the following warning from
lintian, our Debian package checker:

W: network-manager: dbus-policy-without-send-destination 
etc/dbus-1/system.d/org.freedesktop.NetworkManager.conf <policy context="default"><deny 
send_interface="org.freedesktop.NetworkManager.SecretAgent"/>
N: 
N:    The package contains D-Bus policy configuration that uses one of the
N:    send_* conditions, but does not specify a send_destination, and is not
N:    specific to root.
N:    
N:    Rules of the form
N:    
N:      <allow send_interface="com.example.MyInterface"/>
N:    
N:    allow messages with the given interface to be sent to <any> service, not
N:    just the one installing the rule, which is rarely what was intended.
N:    
N:    Similarly, on the system bus, rules of the form
N:    
N:      <deny send_interface="com.example.MyInterface"/>
N:    
N:    are redundant with the system bus's default-deny policy, and have
N:    unintended effects on other services.
N:    
N:    This check ignores rules of the form
N:    
N:      <policy user="root">
N:        <allow ... />
N:      </policy>
N:    
N:    which are commonly used for the "agent" pattern seen in services like
N:    BlueZ and NetworkManager: a root-privileged daemon calls out to one or
N:    more per-user user interface agent processes with no specific name, so
N:    send_destination is not easily applicable. However, such rules should
N:    still be made as specific as possible to avoid undesired side-effects.
N:    
N:    Refer to https://bugs.freedesktop.org/show_bug.cgi?id=18961 and
N:    http://lists.freedesktop.org/archives/dbus/2008-February/009401.html for
N:    details.
N:    
N:    Severity: normal, Certainty: certain
N:    
N:    Check: dbus, Type: binary
N: 
W: network-manager: dbus-policy-without-send-destination 
etc/dbus-1/system.d/org.freedesktop.NetworkManager.conf <policy context="default"><deny 
send_interface="org.freedesktop.NetworkManager" send_member="SetLogging"/>
W: network-manager: dbus-policy-without-send-destination 
etc/dbus-1/system.d/org.freedesktop.NetworkManager.conf <policy context="default"><deny 
send_interface="org.freedesktop.NetworkManager" send_member="Sleep"/>
W: network-manager: dbus-policy-without-send-destination 
etc/dbus-1/system.d/org.freedesktop.NetworkManager.conf <policy context="default"><deny 
send_interface="org.freedesktop.NetworkManager.Settings" send_member="LoadConnections"/>
W: network-manager: dbus-policy-without-send-destination 
etc/dbus-1/system.d/org.freedesktop.NetworkManager.conf <policy context="default"><deny 
send_interface="org.freedesktop.NetworkManager.Settings" send_member="ReloadConnections"/>


Regards,
Michael
-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

Attachment: signature.asc
Description: OpenPGP digital signature



[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]