Red Hat Bugzilla – Bug 167052
CAN-2005-0201 - session bus does not restrict connections base on uid
Last modified: 2013-03-13 00:48:44 EDT
Description of problem:
If I login as root and create a session bus, then login as another user, I am
able to use dbus-send to connect to root's session bus.
Login as root, open a terminal, echo $DBUS_SESSION_BUS_ADDRESS, write down the
Run dbus-monitor --session
Login as another user on a console, run:
env DBUS_SESSION_BUS_ADDRESS=(address written down above) dbus-send
--dest=org.freedesktop.DBus --type=method_call --print-reply
The dbus-send gives a message about not being able to print the return value,
and the dbus-monitor on root's session bus shows the ListServices request coming
this is fgixed upstream nad waiting to be pushed for FC4
From User-Agent: XML-RPC
dbus-0.33-3.fc4.1 has been pushed for FC4, which should resolve this issue.
If these problems are still present in this version, then please re-open this bug.