Blame SOURCES/0244-shared-but-util-drop-trusted-annotation-from-bus_ope.patch

ddca0b
From c3be943b30689f77ded9f431fdafb666769aea89 Mon Sep 17 00:00:00 2001
a3e2b5
From: =?UTF-8?q?Zbigniew=20J=C4=99drzejewski-Szmek?= <zbyszek@in.waw.pl>
a3e2b5
Date: Tue, 27 Aug 2019 19:00:34 +0200
a3e2b5
Subject: [PATCH] shared/but-util: drop trusted annotation from
a3e2b5
 bus_open_system_watch_bind_with_description()
a3e2b5
a3e2b5
https://bugzilla.redhat.com/show_bug.cgi?id=1746057
a3e2b5
a3e2b5
This only affects systemd-resolved. bus_open_system_watch_bind_with_description()
a3e2b5
is also used in timesyncd, but it has no methods, only read-only properties, and
a3e2b5
in networkd, but it annotates all methods with SD_BUS_VTABLE_UNPRIVILEGED and does
a3e2b5
polkit checks.
a3e2b5
a3e2b5
Resolves: #1746857
a3e2b5
---
a3e2b5
 src/shared/bus-util.c | 4 ----
a3e2b5
 1 file changed, 4 deletions(-)
a3e2b5
a3e2b5
diff --git a/src/shared/bus-util.c b/src/shared/bus-util.c
a3e2b5
index a4f2deba31..302dbb4c2e 100644
a3e2b5
--- a/src/shared/bus-util.c
a3e2b5
+++ b/src/shared/bus-util.c
a3e2b5
@@ -1699,10 +1699,6 @@ int bus_open_system_watch_bind_with_description(sd_bus **ret, const char *descri
a3e2b5
         if (r < 0)
a3e2b5
                 return r;
a3e2b5
 
a3e2b5
-        r = sd_bus_set_trusted(bus, true);
a3e2b5
-        if (r < 0)
a3e2b5
-                return r;
a3e2b5
-
a3e2b5
         r = sd_bus_negotiate_creds(bus, true, SD_BUS_CREDS_UID|SD_BUS_CREDS_EUID|SD_BUS_CREDS_EFFECTIVE_CAPS);
a3e2b5
         if (r < 0)
a3e2b5
                 return r;