mirror of
https://gitlab.freedesktop.org/dbus/dbus.git
synced 2026-01-17 00:00:23 +01:00
1e9b185b0c
SELinux support from Matthew Rickard <mjricka@epoch.ncsc.mil> * bus/selinux.c, bus/selinux.h: new file encapsulating selinux functionality * configure.in: add --enable-selinux * bus/policy.c (bus_policy_merge): add FIXME to a comment * bus/main.c (main): initialize and shut down selinux * bus/connection.c: store SELinux ID on each connection, to avoid repeated getting of the string context and converting it into an ID * bus/bus.c (bus_context_get_policy): new accessor, though it isn't used (bus_context_check_security_policy): check whether the security context of sender connection can send to the security context of recipient connection * bus/config-parser.c: add parsing for <selinux> and <associate> * dbus/dbus-transport.c (_dbus_transport_get_unix_fd): to implement dbus_connection_get_unix_fd() * dbus/dbus-connection.c (dbus_connection_get_unix_fd): new function, used by the selinux stuff
32 lines
1.2 KiB
Text
32 lines
1.2 KiB
Text
<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
|
|
"http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
|
|
<busconfig>
|
|
<user>mybususer</user>
|
|
<listen>unix:path=/foo/bar</listen>
|
|
<listen>tcp:port=1234</listen>
|
|
<includedir>basic.d</includedir>
|
|
<servicedir>/usr/share/foo</servicedir>
|
|
<include ignore_missing="yes">nonexistent.conf</include>
|
|
<policy context="default">
|
|
<allow user="*"/>
|
|
</policy>
|
|
|
|
<limit name="max_incoming_bytes">5000</limit>
|
|
<limit name="max_outgoing_bytes">5000</limit>
|
|
<limit name="max_message_size">300</limit>
|
|
<limit name="activation_timeout">5000</limit>
|
|
<limit name="auth_timeout">6000</limit>
|
|
<limit name="max_completed_connections">50</limit>
|
|
<limit name="max_incomplete_connections">80</limit>
|
|
<limit name="max_connections_per_user">64</limit>
|
|
<limit name="max_pending_activations">64</limit>
|
|
<limit name="max_services_per_connection">256</limit>
|
|
|
|
<selinux>
|
|
<associate own="org.freedesktop.FrobationaryMeasures"
|
|
context="my_selinux_context_t"/>
|
|
<associate own="org.freedesktop.BlahBlahBlah"
|
|
context="foo_t"/>
|
|
</selinux>
|
|
|
|
</busconfig>
|