Part of Slepp's Projects — Pastebin — TURL — Imagebin — Filebin
Feedback -- English French German Japanese
Create Upload Newest Tools Donate

Paste Actions

Download Raw
Embed
Post to Twitter
Remove Paste

Paste Details

Raw format, 10 years 7 months old.

Advertising

Mine
Monday, May 28th, 2007 at 7:49:50am UTC 

  1. <!-- This configuration file controls the systemwide message bus.
  2.      Add a system-local.conf and edit that rather than changing this
  3.      file directly. -->
  4.  
  5. <!-- Note that there are any number of ways you can hose yourself
  6.      security-wise by screwing up this file; in particular, you
  7.      probably don't want to listen on any more addresses, add any more
  8.      auth mechanisms, run as a different user, etc. -->
  9.  
  10. <!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-Bus Bus Configuration 1.0//EN"
  11.  "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
  12. <busconfig>
  13.  
  14.   <!-- Our well-known bus type, do not change this -->
  15.   <type>system</type>
  16.  
  17.   <!-- Run as special user -->
  18.   <user>messagebus</user>
  19.  
  20.   <!-- Fork into daemon mode -->
  21.   <fork/>
  22.  
  23.   <!-- Write a pid file -->
  24.   <pidfile>/var/run/dbus/pid</pidfile>
  25.  
  26.   <!-- Only allow socket-credentials-based authentication -->
  27.   <auth>EXTERNAL</auth>
  28.  
  29.   <!-- Only listen on a local socket. (abstract=/path/to/socket
  30.        means use abstract namespace, don't really create filesystem
  31.        file; only Linux supports this. Use path=/whatever on other
  32.        systems.) -->
  33.   <listen>unix:path=/var/run/dbus/system_bus_socket</listen>
  34.  
  35.   <policy context="default">
  36.     <!-- Deny everything then punch holes -->
  37.     <deny send_interface="*"/>
  38.     <deny receive_interface="*"/>
  39.     <deny own="*"/>
  40.     <!-- But allow all users to connect -->
  41.     <allow user="*"/>
  42.     <!-- Allow anyone to talk to the message bus -->
  43.     <!-- FIXME I think currently these allow rules are always implicit
  44.          even if they aren't in here -->
  45.     <allow send_destination="org.freedesktop.DBus"/>
  46.     <allow receive_sender="org.freedesktop.DBus"/>
  47.     <!-- valid replies are always allowed -->
  48.     <allow send_requested_reply="true"/>
  49.     <allow receive_requested_reply="true"/>
  50.   </policy>
  51.  
  52.   <!-- Config files are placed here that among other things, punch
  53.        holes in the above policy for specific services. -->
  54.   <includedir>system.d</includedir>
  55.  
  56.   <!-- This is included last so local configuration can override what's
  57.        in this standard file -->
  58.   <include ignore_missing="yes">system-local.conf</include>
  59.  
  60.   <include if_selinux_enabled="yes" selinux_root_relative="yes">contexts/dbus_contexts</include>
  61.  
  62. </busconfig>

advertising

Update the Post

Either update this post and resubmit it with changes, or make a new post.

You may also comment on this post.

update paste below
details of the post (optional)

Note: Only the paste content is required, though the following information can be useful to others.

Save name / title?

(space separated, optional)



Please note that information posted here will not expire by default. If you do not want it to expire, please set the expiry time above. If it is set to expire, web search engines will not be allowed to index it prior to it expiring. Items that are not marked to expire will be indexable by search engines. Be careful with your passwords. All illegal activities will be reported and any information will be handed over to the authorities, so be good.

comments powered by Disqus
worth-right