Background:
This is triggered by the recent bump of DBus to 1.2.8, which was a 
special release to address a flaw in the bus security policy:
It requires that dbus policies should never use send_interface without 
send_destination. File /etc/dbus-1/system.d/avahi-dbus.conf
needs to be fixed accordingly. For more details see:

http://www.mail-archive.com/debian-bugs-dist at lists.debian.org/msg600731.html
http://bugs.freedesktop.org/show_bug.cgi?id=18961
http://lists.freedesktop.org/archives/dbus/2008-December/010769.html

The suggested fix in the upstream bug

http://avahi.org/ticket/263

is
Change this line:
<deny send_interface="org.freedesktop.Avahi.Server" 
send_member="SetHostName?"/>
To:
<deny send_destination="org.freedesktop.Avahi"
    send_interface="org.freedesktop.Avahi.Server" 
send_member="SetHostName?"/>

so added suggested fix from maintainer, and also remove netdev operation 
which is not applicable on Solaris.

diff -urN avahi-0.6.23/avahi-daemon/avahi-dbus.conf.in 
../SUNWavahi-bridge-dsd-0.6.23.hacked/avahi-0.6.23/avahi-daemon/avahi-dbus.conf.in
--- avahi-0.6.23/avahi-daemon/avahi-dbus.conf.in    2008-06-18 
00:13:44.000000000 +0100
+++ 
../SUNWavahi-bridge-dsd-0.6.23.hacked/avahi-0.6.23/avahi-daemon/avahi-dbus.conf.in
   
  2009-03-06 17:15:26.694436872 +0000
@@ -16,12 +16,7 @@
<allow send_destination="org.freedesktop.Avahi"/>
<allow receive_sender="org.freedesktop.Avahi"/>

- <deny send_interface="org.freedesktop.Avahi.Server" 
send_member="SetHostName"/>
+ <deny send_destination="org.freedesktop.Avahi" 
send_interface="org.freedesktop.Avahi.Server" send_member="SetHostName?"/>
</policy>

- <!-- Allow everything, including access to SetHostName to users of the 
group "@AVAHI_PRIV_ACCESS_GROUP@" -->
- <policy group="@AVAHI_PRIV_ACCESS_GROUP@">
- <allow send_destination="org.freedesktop.Avahi"/>
- <allow receive_sender="org.freedesktop.Avahi"/>
- </policy>
</busconfig>



Reply via email to