Red Hat Bugzilla – Bug 489884
dbus-glib: reply sent even for no_reply messages [rhel-5.3.z]
Last modified: 2013-03-05 22:58:00 EST
With introduction of patch for CVE-2008-4311, dbus will log message denials by default. Introduction of such functionality upstream uncovered a bug in dbus-glib bindings, that result in reply message being sent even if sender explicitly requested no reply. Such not requested reply is rejected by the strict system dbus policy, resulting in denial being logged.
Related upstream bug reports:
We do want to avoid those unneeded rejects being logged, so this fix should be included in errata introducing a fix for CVE-2008-4311 in dbus packages.
As CVE-2008-4311 has been deferred, this bug obviously follows suit. If
CVE-2008-4311 is fixed in a future update, this bug will be addressed there.
Hi. As I've said here:
I think the upstream bug-fix is wrong.
In other words: this is definitely not a problem with the dbus-glib bindings - it's a problem with the bus daemon being too strict. So I think we should fix the bus to not be so strict... because otherwise we end up "fixing" lots of other bindings than just dbus-glib. Colin, what do you think?