fdo-mirrors/dbus
1
0
Fork 0
mirror of https://gitlab.freedesktop.org/dbus/dbus.git synced 2026-02-05 08:50:26 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

dbus-daemon(1): Recommend requiring EXTERNAL on non-Windows OSs

Browse source 
This is the default, and blocks TCP-based attacks by making the
attacker fail to authenticate (while also preventing inadvisable
TCP-based configurations from working).

Bug: https://bugs.freedesktop.org/show_bug.cgi?id=106004
Signed-off-by: Simon McVittie <smcv@collabora.com>
Reviewed-by: Ralf Habacker <ralf.habacker@freenet.de>
Reviewed-by: Philip Withnall <withnall@endlessm.com>
(cherry picked from commit aef4475939)
This commit is contained in:
Simon McVittie 2018-04-12 14:09:19 +01:00
parent 682ab5e564
commit a3a37f8bc2
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
doc/dbus-daemon.1.xml.in
View file

@ -491,6 +491,10 @@ exist, then all known mechanisms are allowed. If there are multiple
&lt;auth&gt; elements, all the listed mechanisms are allowed. The order in
which mechanisms are listed is not meaningful.</para>
<para>On non-Windows operating systems, allowing only the
<literal>EXTERNAL</literal> authentication
mechanism is strongly recommended. This is the default for the
well-known system bus and for the well-known session bus.</para>
<para>Example: &lt;auth&gt;EXTERNAL&lt;/auth&gt;</para>