]> code.ossystems Code Review - openembedded-core.git/commit
dbus: CVE-2015-0245: prevent forged ActivationFailure
authorJussi Kukkonen <jussi.kukkonen@intel.com>
Wed, 24 Jun 2015 20:06:46 +0000 (23:06 +0300)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Sun, 28 Jun 2015 08:42:03 +0000 (09:42 +0100)
commit961aaa50ed363a680b08be77a44ac13ce984b2f3
tree27ac42d8abba883094c9e5577216f8c4988a2a38
parent7d4230b7eb7aa09087a6267dd6e686f713ac6f72
dbus: CVE-2015-0245: prevent forged ActivationFailure

Fix CVE-2015-0245 by preventing non-root and non-systemd processes
from fooling the dbus daemon into thinking systemd service activation
failed.

Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com>
meta/recipes-core/dbus/dbus.inc
meta/recipes-core/dbus/dbus/CVE-2015-0245-prevent-forged-ActivationFailure.patch [new file with mode: 0644]