reassign 512228 system-tools-backends thanks Andrew Deason wrote: > I see this too, but it seems like a bug in system-tools-backends to me. > I first started seeing this message when s-t-b was fixed due to > CVE-2008-4311, so I think the dbus system.d config just isn't right.
Agreed. reassigning to system-tools-backends. > There's an explicit <deny > send_destination="org.freedesktop.SystemToolsBackends"/> in there, > which is specifically what e.g. nautilus is calling. > > If I add <allow send_destination="org.freedesktop.SystemToolsBackends" > send_interface="org.freedesktop.SystemToolsBackends" send_member="get" > send_type="method_call"/> to the default policy > in /etc/dbus-1/system.d/system-tools-backends.conf, it looks like I > don't get the message anymore. Is this a correct fix? Depends on how s-t-b works. Usually such an interface should be limited to a specific user/group or by at_console. If s-t-b is using PolicyKit internally to authorise the method calls, then it can open up it's dbus interface to everyone. Cheers, Michael -- Why is it that all of the instruments seeking intelligent life in the universe are pointed away from Earth?
signature.asc
Description: OpenPGP digital signature

