summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorPeter Vrabec <pvrabec@redhat.com>2012-04-03 14:15:06 (GMT)
committer Peter Vrabec <pvrabec@redhat.com>2012-04-03 14:15:06 (GMT)
commit4859832281f0e08c6fbe48fc252c4199a0e9e322 (patch)
tree5a07f6074a9f1c9d564afa17d1e9ba93c38a612a
parenta6a489926470a87efb415a8014da464aa30ca34e (diff)
downloadsectool-4859832281f0e08c6fbe48fc252c4199a0e9e322.zip
sectool-4859832281f0e08c6fbe48fc252c4199a0e9e322.tar.gz
sectool-4859832281f0e08c6fbe48fc252c4199a0e9e322.tar.bz2
fixing dbus config privilege escalation (#809437)f17f16
-rw-r--r--sectool-0.9.5-dbus.patch12
-rw-r--r--sectool.spec7
2 files changed, 18 insertions, 1 deletions
diff --git a/sectool-0.9.5-dbus.patch b/sectool-0.9.5-dbus.patch
new file mode 100644
index 0000000..aedb3ef
--- /dev/null
+++ b/sectool-0.9.5-dbus.patch
@@ -0,0 +1,12 @@
+diff -up sectool-0.9.5/org.fedoraproject.sectool.mechanism.conf.dbus sectool-0.9.5/org.fedoraproject.sectool.mechanism.conf
+--- sectool-0.9.5/org.fedoraproject.sectool.mechanism.conf.dbus 2012-04-03 15:21:05.521186717 +0200
++++ sectool-0.9.5/org.fedoraproject.sectool.mechanism.conf 2012-04-03 15:23:57.602490428 +0200
+@@ -9,7 +9,6 @@
+ <allow own="org.fedoraproject.sectool.mechanism"/>
+ </policy>
+ <policy context="default">
+- <allow send_destination="org.fedoraproject.sectool.mechanism"/>
+- <allow send_type="method_call"/>
++ <allow send_destination="org.fedoraproject.sectool.mechanism" send_type="method_call"/>
+ </policy>
+ </busconfig>
diff --git a/sectool.spec b/sectool.spec
index 34df4dc..8740814 100644
--- a/sectool.spec
+++ b/sectool.spec
@@ -1,7 +1,7 @@
Summary: A security audit system and intrusion detection system
Name: sectool
Version: 0.9.5
-Release: 6%{?dist}
+Release: 7%{?dist}
URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart
License: GPLv2+
Group: Applications/System
@@ -9,6 +9,7 @@ Group: Applications/System
Source0: https://fedorahosted.org/releases/s/e/sectool/%{name}-%{version}.tar.bz2
Source1: sectool.log
Patch1: sectool-0.9.5-optflags.patch
+Patch2: sectool-0.9.5-dbus.patch
Requires: gettext coreutils python-slip-dbus polkit dbus
Requires: python2 rpm-python
@@ -42,6 +43,7 @@ sectool-gui provides a GTK-based graphical user interface to sectool.
%prep
%setup -q
%patch1 -p1 -b .optflags
+%patch2 -p1 -b .dbus
%build
make %{?_smp_mflags}
@@ -111,6 +113,9 @@ touch $RPM_BUILD_ROOT%{_localstatedir}/log/sectool.log
%changelog
+* Tue Apr 03 2012 Peter Vrabec <pvrabec@redhat.com> - 0.9.5-7
+- fixing dbus config privilege escalation (#809437)
+
* Sun Mar 4 2012 Peter Robinson <pbrobinson@fedoraproject.org> - 0.9.5-6
- PolicyKit -> polkit since F-11