Skip to content

Commit ac45bcc

Browse files
itsXuStdeepin-bot[bot]
authored andcommitted
fix: remove redundant D-Bus policy rules for security hardening
- Remove allow own rule from default policy (already defined in root policy) - Remove redundant interface-specific allow rules - Keep only the minimal send_destination rule for default policy Log: Clean up D-Bus configuration by removing redundant permission rules
1 parent a2511d4 commit ac45bcc

File tree

1 file changed

+0
-4
lines changed

1 file changed

+0
-4
lines changed

deepin-system-monitor-system-server/misc/org.deepin.SystemMonitorSystemServer.conf

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -8,10 +8,6 @@
88
</policy>
99
<!-- Allow anyone to invoke methods on the interfaces -->
1010
<policy context="default">
11-
<allow own="org.deepin.SystemMonitorSystemServer" />
1211
<allow send_destination="org.deepin.SystemMonitorSystemServer" />
13-
<allow send_destination="org.deepin.SystemMonitorSystemServer" send_interface="org.deepin.SystemMonitorSystemServer" />
14-
<allow send_destination="org.deepin.SystemMonitorSystemServer" send_interface="org.freedesktop.DBus.Properties" />
15-
<allow send_destination="org.deepin.SystemMonitorSystemServer" send_interface="org.freedesktop.DBus.Introspectable" />
1612
</policy>
1713
</busconfig>

0 commit comments

Comments
 (0)