fdo-mirrors/dbus
1
0
Fork 0
mirror of https://gitlab.freedesktop.org/dbus/dbus.git synced 2026-01-09 00:30:18 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

config: change default auth_timeout to 5 seconds

Browse source 
This partially addresses CVE-2014-3639.

This will change the default on the system bus where the limit
  <limit name="auth_timeout">...</limit>
is not specified.

Bug: https://bugs.freedesktop.org/show_bug.cgi?id=80919
Reviewed-by: Thiago Macieira <thiago@kde.org>
Reviewed-by: Simon McVittie <simon.mcvittie@collabora.co.uk>
This commit is contained in:
Alban Crequy 2014-07-08 12:00:58 +01:00 • committed by Simon McVittie
parent 6465e37c8f
commit 54d26df52b
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
bus/config-parser.c
View file

@ -438,7 +438,7 @@ bus_config_parser_new (const DBusString *basedir,
* and legitimate auth will fail. If interactive auth (ask user for
* password) is allowed, then potentially it has to be quite long.
*/
parser->limits.auth_timeout = 30000; /* 30 seconds */
parser->limits.auth_timeout = 5000; /* 5 seconds */
parser->limits.max_incomplete_connections = 64;
parser->limits.max_connections_per_user = 256;