2003-09-25 Havoc Pennington <hp@pobox.com>

* bus/session.conf.in: fix security policy, reported by Seth Nickell

ChangeLog

@@ -1,3 +1,7 @@
+2003-09-25  Havoc Pennington  <hp@pobox.com>
+
+	* bus/session.conf.in: fix security policy, reported by Seth Nickell
+
 2003-09-25  Seth Nickell  <seth@gnome.org>
 
 	* python/examples/example-service.py:

bus/session.conf.in

@@ -13,9 +13,13 @@
   <servicedir>@EXPANDED_LIBDIR@/dbus-1.0/services</servicedir>
 
   <policy context="default">
-    <!-- Allow everything -->
+    <!-- Allow everything to be sent -->
+    <allow send_destination="*"/>
+    <!-- Allow everything to be received */
     <allow eavesdrop="true"/>
+    <!-- Allow anyone to own anything -->
     <allow own="*"/>
+    <!-- Allow any user to connect -->
     <allow user="*"/>
   </policy>
 

doc/TODO

@@ -92,4 +92,6 @@
 
  - dbus_gproxy or dbus_g_proxy?
 
+ - add dbus_message_has_path(), maybe has_member/interface
+
  - The OBJECT_PATH type is not documented in the spec.