From 30897dd72b2fb6062d4857abc6b9295b17fda0a4 Mon Sep 17 00:00:00 2001 From: Lukasz Skalski Date: Mon, 5 Jan 2015 14:45:55 +0100 Subject: bus-proxyd: don't allow to acquire org.freedesktop.DBus name --- src/bus-proxyd/bus-proxyd.c | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'src/bus-proxyd') diff --git a/src/bus-proxyd/bus-proxyd.c b/src/bus-proxyd/bus-proxyd.c index a7818f5462..fc70cce940 100644 --- a/src/bus-proxyd/bus-proxyd.c +++ b/src/bus-proxyd/bus-proxyd.c @@ -829,6 +829,10 @@ static int process_driver(sd_bus *a, sd_bus *b, sd_bus_message *m, Policy *polic if (r < 0) return synthetic_reply_method_errno(m, r, NULL); + if (streq(name, "org.freedesktop.DBus")) + return synthetic_reply_method_error(m, &SD_BUS_ERROR_MAKE_CONST(SD_BUS_ERROR_INVALID_ARGS, + "Connection is not allowed to own the org.freedesktop.DBus service.")); + if (policy && !policy_check_own(policy, ucred->uid, ucred->gid, name)) return synthetic_reply_method_errno(m, -EPERM, NULL); -- cgit v1.2.3-54-g00ecf