On 05/11/2016 10:22 AM, Jamie Strandboge wrote:
...
>
> We then have dbus-session-strict:
> unix (connect, receive, send)
> type=stream
> peer=(addr="@/tmp/dbus-*"),
>
> There is a problem with this policy though; that access is not very
> strict at all and we should adjust the unity7 interface accordingly (and
> test that ibus still works).
I'm not sure how we could do that without code changes. There's nothing
differentiating the session bus' abstract socket name from the ibus bus'
abstract socket name.
> Is ibus-daemon actually a dbus service or is it something else?
It looks to me like it is its own bus daemon. In other words, the
equivalent of something like `dbus-daemon --session` instead of simply
being a dbus service.
On 05/11/2016 10:22 AM, Jamie Strandboge wrote: strict: "@/tmp/ dbus-*" ),
...
>
> We then have dbus-session-
> unix (connect, receive, send)
> type=stream
> peer=(addr=
>
> There is a problem with this policy though; that access is not very
> strict at all and we should adjust the unity7 interface accordingly (and
> test that ibus still works).
I'm not sure how we could do that without code changes. There's nothing
differentiating the session bus' abstract socket name from the ibus bus'
abstract socket name.
> Is ibus-daemon actually a dbus service or is it something else?
It looks to me like it is its own bus daemon. In other words, the
equivalent of something like `dbus-daemon --session` instead of simply
being a dbus service.