On Mon, 2009-01-19 at 16:43 +, Alberto Milone wrote:
> In other words, if they decide to update Dbus in Intrepid we'll have
> to upload this fix .
>
It's probably easier if we find a service that is exploitable, to just
upload a fix for that service's policy conf to deny the method calls
expl
Thanks for the patch, Martin.
I agree with you that, if we were to upload this fix to Intrepid,
-security would be the best place where this should happen.
Today I've read Scott's email in ubuntu-devel which says:
"We've audited the system bus services shipped in Ubuntu, and are
confident that t
** Tags added: dbus-policy
--
No permission to call method (dbus 1.2.8)
https://bugs.launchpad.net/bugs/306705
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu
Sponsored for Jaunty. Alberto, please apply the attached patch to your
bzr branch, so that it is consistent with Jaunty, and also adds the Vcs-
Bzr: header.
Do we need to fix this in intrepid as well? AFAICS we only need to do
that if we put the stricter D-Bus fix into intrepid.
If the new D-Bus
This bug was fixed in the package screen-resolution-extra - 0.4
---
screen-resolution-extra (0.4) jaunty; urgency=low
[ Scott James Remnant ]
* com.ubuntu.ScreenResolution.Mechanism.conf:
- allow messages to be sent to the service. LP: #306705.
[ Martin Pitt ]
* debian/c
The full source is available in my bazaar branch:
https://code.launchpad.net/~albertomilone/screen-resolution-extra/main
--
No permission to call method (dbus 1.2.8)
https://bugs.launchpad.net/bugs/306705
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscri
It works in Jaunty too.
SRU request:
TEST-CASE:
The supplied D-Bus system bus configuration does not contain any policy to
allow communication with the exported objects. Thus this only works because of
a security flaw in D-Bus, fixed in 1.2.6/8.
If not updated, the GNOME Screen Resolution appl
Thanks a lot for the patch. I tested it and I didn't experience any
problems in Intrepid.
--
No permission to call method (dbus 1.2.8)
https://bugs.launchpad.net/bugs/306705
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs
** Changed in: screen-resolution-extra (Ubuntu)
Importance: Undecided => High
Assignee: (unassigned) => Alberto Milone (albertomilone)
Status: New => Confirmed
--
No permission to call method (dbus 1.2.8)
https://bugs.launchpad.net/bugs/306705
You received this bug notification bec
** Attachment added: "screen-resolution-extra_0.3.1.debdiff"
http://launchpadlibrarian.net/20331810/screen-resolution-extra_0.3.1.debdiff
--
No permission to call method (dbus 1.2.8)
https://bugs.launchpad.net/bugs/306705
You received this bug notification because you are a member of Ubuntu
B
10 matches
Mail list logo
