Package: yum Version: 3.2.12-1.2 Severity: normal User: pkg-utopia-maintain...@lists.alioth.debian.org Usertags: fdo-18961
yum's D-Bus system.d config should be updated to fix non-deterministic allow/deny for messages with no interface; the D-Bus upstream recommendation seems to be that every allow or deny rule with send_interface="..." should have a suitable send_destination attribute too. In this case, this would make them redundant with the lines matching send_destination="...", so they can just be removed (see the patch for dnsmasq on the bug linked below). http://bugs.freedesktop.org/show_bug.cgi?id=18961 is the D-Bus bug tracking this; there have also been discussions on the D-Bus mailing list. Also, are users at the console really meant to be allowed to masquerade as the yum updates daemon? (<allow own="edu.duke.linux.yum"/>) Regards from the Cambridge BSP, Simon
signature.asc
Description: Digital signature
