Bug#510651: gnome-power-manager: /etc/dbus-1/system.d file needs alterations for fd.o #18961

[Simon McVittie]

Package: gnome-power-manager
Version: 2.22.1-4
Severity: normal
User: pkg-utopia-maintainers at lists.alioth.debian.org
Usertags: fdo-18961

gnome-power-manager's D-Bus system.d config should be updated to fix
non-deterministic allow/deny for messages with no interface (related to
CVE-2008-4311).

http://bugs.freedesktop.org/show_bug.cgi?id=18961 is the D-Bus bug tracking
this. It appears from the dnsmasq patch there that removing the lines
<allow send_interface="org.gnome.PowerManager"/> and
<deny send_interface="org.gnome.PowerManager"/> is recommended.

Regards from the Cambridge BSP,
    Simon
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 155 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-gnome-maintainers/attachments/20090104/08c5ec6c/attachment-0001.pgp