Skip to content
Snippets Groups Projects
  1. Feb 07, 2018
  2. Feb 06, 2018
    • Tom Gundersen's avatar
      launch/policy: drop eavesdropping support · e909762a
      Tom Gundersen authored
      
      The broker does not support eavesdropping and ignores the passed in 'eavesdrop' boolean.
      That causes the wrong behavior in case of <deny eavesdrop=true>, which should only deny
      eavesdropping, but now denies everything. Properly drop eavesdropping support from the
      launcher and filter out the rules correctly.
      
      Additionally, warn in case a rule attempts to allow eavesdropping (as the standard
      session bus policy does). This is not expected to cause any problems, but the logs
      should reflect the potential change of behavior.
      
      Signed-off-by: default avatarTom Gundersen <teg@jklm.no>
      e909762a
    • Tom Gundersen's avatar
      launch/policy: do not warn when ignoring noop policy entries · e1da9dc1
      Tom Gundersen authored
      
      Do not emit warnings on explicit policy entries that are noops, as they
      just confirm our hard-coded defaults. For instance, allowing expected
      replies or disallowing unexpected replies.
      
      Only emit warnings on rules that would have had an effect if enforced,
      i.e., where there is an actual problem to be addressed.
      
      This eliminates all (harmless) warnings caused by the reference policy:
      dbus-broker-launch[740]: Reply/Error policy in /usr/share/dbus-1/system.conf +56: Explicit policies on replies and errors are deprecated and ignored
      dbus-broker-launch[740]: Reply/Error policy in /usr/share/dbus-1/system.conf +57: Explicit policies on replies and errors are deprecated and ignored
      dbus-broker-launch[740]: Reply/Error policy in /usr/share/dbus-1/system.conf +61: Explicit policies on replies and errors are deprecated and ignored
      dbus-broker-launch[740]: Reply/Error policy in /usr/share/dbus-1/system.conf +62: Explicit policies on replies and errors are deprecated and ignored
      
      Signed-off-by: default avatarTom Gundersen <teg@jklm.no>
      e1da9dc1
  3. Jan 29, 2018
  4. Jan 24, 2018
  5. Jan 23, 2018
  6. Jan 22, 2018
  7. Dec 15, 2017
  8. Dec 13, 2017
    • Tom Gundersen's avatar
      launcher: reduce time spent in STARTING state · fa1fb846
      Tom Gundersen authored
      
      dbus-broker is now in the critical path during boot, it orders before
      basic.target, and as such should not block unneccessarily.
      
      The reason for delaying at all is to make sure all blocking calls from
      the launcher have finished before anything else blocks on the broker.
      Move the config parsing (which does the blocking calls as part of nss)
      early and immediately notify PID1 of being started as soon as that is
      done.
      
      On my machine this roughly halves the time dbus-broker blocks boot from
      ~60ms to ~30ms.
      
      Signed-off-by: default avatarTom Gundersen <teg@jklm.no>
      fa1fb846
  9. Nov 30, 2017
Loading