diff options
| author | Jussi Kukkonen <jussi.kukkonen@intel.com> | 2015-09-25 14:14:01 +0300 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2015-09-28 11:58:24 +0100 |
| commit | 7c75981944e92b5534b054058407d19de2a8a78c (patch) | |
| tree | 0dc9c90e9d731029488cad59acb7a913b57b7d3e /meta/recipes-connectivity/connman/connman.inc | |
| parent | b791b8f1d175a73fcb9e48b3fcd56ebbc6bf6de1 (diff) | |
| download | openembedded-core-7c75981944e92b5534b054058407d19de2a8a78c.tar.gz openembedded-core-7c75981944e92b5534b054058407d19de2a8a78c.tar.bz2 openembedded-core-7c75981944e92b5534b054058407d19de2a8a78c.zip | |
connman: Don't use a blanket "allow" D-Bus policy
There are already "allow" rules for root and conditionally xuser to
send messages to connman: there should be no reason for a default
allow policy.
Also, conditionally add a policy to allow xuser to send to the
connman vpn service (similar to main service).
Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Diffstat (limited to 'meta/recipes-connectivity/connman/connman.inc')
| -rw-r--r-- | meta/recipes-connectivity/connman/connman.inc | 6 |
1 files changed, 0 insertions, 6 deletions
diff --git a/meta/recipes-connectivity/connman/connman.inc b/meta/recipes-connectivity/connman/connman.inc index 6c062ae7a1..1712af3016 100644 --- a/meta/recipes-connectivity/connman/connman.inc +++ b/meta/recipes-connectivity/connman/connman.inc @@ -70,13 +70,7 @@ SYSTEMD_SERVICE_${PN} = "connman.service" SYSTEMD_SERVICE_${PN}-vpn = "connman-vpn.service" SYSTEMD_WIRED_SETUP = "ExecStartPre=-${libdir}/connman/wired-setup" -# This allows *everyone* to access ConnMan over DBus, without any access -# control. Really the at_console flag should work, which would mean that -# both this and the xuser patch can be dropped. do_compile_append() { - sed -i -e s:deny:allow:g ${S}/src/connman-dbus.conf - sed -i -e s:deny:allow:g ${S}/vpn/vpn-dbus.conf - sed -i "s#ExecStart=#${SYSTEMD_WIRED_SETUP}\nExecStart=#" ${B}/src/connman.service } |