fdo-mirrors/dbus
1
0
Fork 0
mirror of https://gitlab.freedesktop.org/dbus/dbus.git synced 2026-05-08 03:18:03 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

dbus-daemon(1): Actually document "own" rules

Browse source 
Signed-off-by: Simon McVittie <smcv@collabora.com>
Reviewed-by: Thiago Macieira <thiago@kde.org>
Bug: https://bugs.freedesktop.org/show_bug.cgi?id=92853
This commit is contained in:
Simon McVittie 2017-07-19 15:46:00 +01:00 • committed by Simon McVittie
parent bc9c63f8f1
commit c1348e23fe
1 changed files with 11 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
doc/dbus-daemon.1.xml.in
View file

@ -938,6 +938,17 @@ the character "*" can be substituted, meaning "any." Complex globs
like "foo.bar.*" aren't allowed for now because they'd be work to
implement and maybe encourage sloppy security anyway.</para>
<para>
Rules with the <literal>own</literal> or <literal>own_prefix</literal>
attribute are checked when a connection attempts to own a well-known bus
names. As a special case, <literal>own="*"</literal> matches any well-known
bus name. The well-known session bus normally allows any connection to
own any name, while the well-known system bus normally does not allow any
connection to own any name, except where allowed by further configuration.
System services that will own a name must install configuration that allows
them to do so, usually via rules of the form
<literal>&lt;policy user="some-system-user"&gt;&lt;allow own="&hellip;"/&gt;&lt;/policy&gt;</literal>.
</para>
<para>&lt;allow own_prefix="a.b"/&gt; allows you to own the name "a.b" or any
name whose first dot-separated elements are "a.b": in particular,