Skip to content

Commit 2c80306

Browse files
committed
feat: dbus安全整改
服务所有权分离:<allow own="..."/> 只保留在 <policy user="root"> 中,确保只有 root 用户可以拥有这些服务 Task: https://pms.uniontech.com/task-view-343075.html Influence: 不对功能造成影响
1 parent 8399b0c commit 2c80306

5 files changed

Lines changed: 1 addition & 7 deletions

File tree

bin/backlight_helper/ddcci/manager.go

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,6 @@ import (
1111
"github.com/godbus/dbus/v5"
1212
"github.com/linuxdeepin/go-lib/dbusutil"
1313
"github.com/linuxdeepin/go-lib/log"
14-
x "github.com/linuxdeepin/go-x11-client"
1514
)
1615

1716
const (
@@ -26,8 +25,7 @@ type Manager struct {
2625
service *dbusutil.Service
2726
ddcci *ddcci
2827

29-
PropsMu sync.RWMutex
30-
configTimestamp x.Timestamp
28+
PropsMu sync.RWMutex
3129
}
3230

3331
func NewManager(service *dbusutil.Service) (*Manager, error) {

misc/conf/org.deepin.dde.BacklightHelper1.conf

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,6 @@
1212

1313
<!-- Allow anyone to invoke methods on the interfaces -->
1414
<policy context="default">
15-
<allow own="org.deepin.dde.BacklightHelper1"/>
1615
<allow send_destination="org.deepin.dde.BacklightHelper1"/>
1716

1817
<allow send_destination="org.deepin.dde.BacklightHelper1"

misc/conf/org.deepin.dde.Daemon1.conf

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,6 @@
1414

1515
<!-- Allow anyone to invoke methods on the interfaces -->
1616
<policy context="default">
17-
<allow own="org.deepin.dde.Daemon1"/>
1817
<allow send_destination="org.deepin.dde.Daemon1"/>
1918

2019
<allow send_destination="org.deepin.dde.Daemon1"

misc/conf/org.deepin.dde.Greeter1.conf

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,6 @@
1212

1313
<!-- Allow anyone to invoke methods on the interfaces -->
1414
<policy context="default">
15-
<allow own="org.deepin.dde.Greeter1"/>
1615
<allow send_destination="org.deepin.dde.Greeter1"/>
1716

1817
<allow send_destination="org.deepin.dde.Greeter1"

misc/conf/org.deepin.dde.Timedate1.conf

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,6 @@
1212

1313
<!-- Allow anyone to invoke methods on the interfaces -->
1414
<policy context="default">
15-
<allow own="org.deepin.dde.Timedate1"/>
1615
<allow send_destination="org.deepin.dde.Timedate1"/>
1716

1817
<allow send_destination="org.deepin.dde.Timedate1"

0 commit comments

Comments
 (0)