Skip to content

Commit 68b0d4f

Browse files
committed
fix: Harden DBus security configuration
- Remove redundant allow own rule from default policy - Keep allow own only in root policy for security - Remove redundant interface-specific allow rules - Simplify configuration while maintaining functionality Log: Improve DBus security by ensuring only root can own the service
1 parent 46cc882 commit 68b0d4f

1 file changed

Lines changed: 0 additions & 8 deletions

File tree

service/assets/data/com.deepin.diskmanager.conf

Lines changed: 0 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -12,15 +12,7 @@
1212

1313
<!-- Allow anyone to invoke methods on the interfaces -->
1414
<policy context="default">
15-
<allow own="com.deepin.diskmanager"/>
1615
<allow send_destination="com.deepin.diskmanager"/>
17-
18-
<allow send_destination="com.deepin.diskmanager"
19-
send_interface="com.deepin.diskmanager"/>
20-
<allow send_destination="com.deepin.diskmanager"
21-
send_interface="org.freedesktop.DBus.Properties"/>
22-
<allow send_destination="com.deepin.diskmanager"
23-
send_interface="org.freedesktop.DBus.Introspectable"/>
2416
</policy>
2517

2618
</busconfig>

0 commit comments

Comments
 (0)