← Back to branch summary

~ubuntu-branches/ubuntu/gutsy/network-manager-applet/gutsy-security

« back to all changes in this revision

Viewing changes to debian/patches/16_security_CVE-2009-0365.patch

  • Committer: Bazaar Package Importer
  • Author(s): Marc Deslauriers
  • Date: 2009-02-26 11:28:09 UTC
  • mfrom: (11.1.1 gutsy-proposed)
  • Revision ID: james.westby@ubuntu.com-20090226112809-yha0hsqoejpkns5b
Tags: 0.6.5-0ubuntu11~7.10.1
* SECURITY UPDATE: Secrets disclosure to unauthorized users
  - debian/patches/16_security_CVE-2009-0365.patch: Fix dbus permissions.
  - CVE-2009-0365

Show diffs side-by-side

added added

removed removed

Lines of Context:
debian/patches/16_security_CVE-2009-0365.patch
 
1
#
 
2
# Description: fix secrets disclosure to unauthorized users (CVE-2009-0365)
 
3
#
 
4
diff -Nur -x '*.orig' -x '*~' network-manager-applet-0.6.5/nm-applet.conf network-manager-applet-0.6.5.new/nm-applet.conf
 
5
--- network-manager-applet-0.6.5/nm-applet.conf 2007-04-19 14:01:22.000000000 -0400
 
6
+++ network-manager-applet-0.6.5.new/nm-applet.conf     2009-02-26 11:27:29.000000000 -0500
 
7
@@ -13,6 +13,19 @@
 
8
 
 
9
                <allow send_destination="org.freedesktop.NetworkManagerInfo"/>
 
10
                 <allow send_interface="org.freedesktop.NetworkManagerInfo"/>
 
11
+
 
12
+               <!-- Only root can get keys -->
 
13
+               <deny send_destination="org.freedesktop.NetworkManagerInfo"
 
14
+                      send_interface="org.freedesktop.NetworkManagerInfo"
 
15
+                      send_member="getKeyForNetwork"/>
 
16
+
 
17
+               <deny send_destination="org.freedesktop.NetworkManagerInfo"
 
18
+                      send_interface="org.freedesktop.NetworkManagerInfo"
 
19
+                      send_member="cancelGetKeyForNetwork"/>
 
20
+
 
21
+               <deny send_destination="org.freedesktop.NetworkManagerInfo"
 
22
+                      send_interface="org.freedesktop.NetworkManagerInfo"
 
23
+                      send_member="updateNetworkInfo"/>
 
24
        </policy>
 
25
        <policy context="default">
 
26
                <deny own="org.freedesktop.NetworkManagerInfo"/>