mirror of
https://gitlab.freedesktop.org/NetworkManager/NetworkManager.git
synced 2026-01-03 22:10:14 +01:00
dbus: ensure NM can talk to newly installed VPN plugins (fdo #39463)
When new services are installed and the daemon reloads bus policy (like when installing new VPN plugins with rpm or dpkg) it appears the rules don't get loaded into NetworkManager's policy space. Thus any D-Bus message NM sends to the newly installed VPN plugin gets denied until a restart of NM or the machine. Work around this dbus bug by letting NM talk to all known VPN services in the NM policy file which will always exist when NM is around.
This commit is contained in:
parent
77e9cd53a8
commit
770548ac04
1 changed files with 13 additions and 0 deletions
|
|
@ -10,6 +10,19 @@
|
|||
send_interface="org.freedesktop.NetworkManager.PPP"/>
|
||||
|
||||
<allow send_interface="org.freedesktop.NetworkManager.SecretAgent"/>
|
||||
|
||||
<!-- Allow NM to talk to known VPN plugins; due to a bug in
|
||||
the D-Bus daemon, when a plugin is installed and the user
|
||||
immediately tries to use it, the VPN plugin's rules aren't
|
||||
always loaded into dbus-daemon. Those rules allow NM to
|
||||
talk to the plugin. Oops. Work around that by explicitly
|
||||
allowing NM to talk to VPN plugins here.
|
||||
-->
|
||||
<allow send_destination="org.freedesktop.NetworkManager.openconnect"/>
|
||||
<allow send_destination="org.freedesktop.NetworkManager.openswan"/>
|
||||
<allow send_destination="org.freedesktop.NetworkManager.openvpn"/>
|
||||
<allow send_destination="org.freedesktop.NetworkManager.pptp"/>
|
||||
<allow send_destination="org.freedesktop.NetworkManager.vpnc"/>
|
||||
</policy>
|
||||
<policy at_console="true">
|
||||
<allow send_destination="org.freedesktop.NetworkManager"/>
|
||||
|
|
|
|||
Loading…
Add table
Reference in a new issue