[Pkg-utopia-maintainers] Bug#510790: consolekit: /etc/dbus-1/system.d file needs alterations for fd.o #18961

[Simon McVittie]

Package: consolekit
Version: 0.2.10-3
Severity: normal
User: pkg-utopia-maintainers at lists.alioth.debian.org
Usertags: fdo-18961

consolekit's D-Bus system.d config should be updated to fix
non-deterministic allow/deny for messages with no interface; the D-Bus
upstream recommendation seems to be that every allow or deny rule with
send_interface="..." should have a suitable send_destination attribute too.

http://bugs.freedesktop.org/show_bug.cgi?id=18961 is the D-Bus bug tracking
this; there have also been discussions on the D-Bus mailing list.

Please test the resulting package against the dbus package from
http://people.debian.org/~smcv/dbus-cve-2008-4311/ (you might be better
off waiting until hal's current RC bug has been fixed before you
upgrade). ConsoleKit.conf is subtle enough that I don't feel confident
that I can suggest a correct configuration...

Regards from the Cambridge BSP,
    Simon
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 155 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-utopia-maintainers/attachments/20090104/bf608b35/attachment.pgp