From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Message-ID: <3013cac80511250632p3a49a2f2t5959561a3e01c603@mail.gmail.com> From: Eduardo Rocha To: bluez-devel@lists.sourceforge.net Subject: Re: [Bluez-devel] [DBUS Patch] Device Property In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 References: <3013cac80511040603k52c40da2gae5249abcba426d9@mail.gmail.com> <3013cac80511180251w1d2fa8f5s80ce1da7318327e7@mail.gmail.com> <20051118112611.GA17062@localhost.localdomain> <3013cac80511180500h5539d5d9y3f19ce224f9e38b7@mail.gmail.com> <1132660308.28644.37.camel@blade> <3013cac80511221152t2911f513jb28f3944097c1b09@mail.gmail.com> <1132805822.5982.15.camel@blade> <3013cac80511241050o2f3d67aele639b2c69de41360@mail.gmail.com> <1132872886.3170.3.camel@blade> Sender: bluez-devel-admin@lists.sourceforge.net Errors-To: bluez-devel-admin@lists.sourceforge.net Reply-To: bluez-devel@lists.sourceforge.net List-Unsubscribe: , List-Id: BlueZ development List-Post: List-Help: List-Subscribe: , List-Archive: Date: Fri, 25 Nov 2005 11:32:02 -0300 Hi Claudio, in the last email you mean 3 levels of security (bluezadmin, bluezusers, and default). I think is a good idea for the client to have local user id and not root (not use setuid for root). Making one or more groups I think is more flexibe. With the current operations, I only don't see the poit to have a Manager path. I think this operations can be mapped by Device path. BR, Eduardo. On 11/25/05, Claudio Takahasi wrote: > Hi, > > IMHO, it's enough two level of security. My suggestion is create a > bluezadmin group to > allow the device setup operations(write operations). Read operations > can be allowed to > bluezusers and bluezadmin. Another point is only the root can own the > service, I mean, > Only the root can run the hcid daemon. > > /org/bluez/Manager > - get default device > - list adapters > /org/bluez/Device/hciX > - UP (*) > - Down (*) > - SetProperty (*) > - GetProperty > /org/bluez/Device/hciX/Controller > /org/bluez/Device/hciX/Network > /org/bluez/Device/hciX/Serial > > Configuration file suggestion: > "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN" > "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd"> > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Regards, > Claudio > > On 11/24/05, Marcel Holtmann wrote: > > Hi Eduardo, > > > > > maybe we should create a bluetooth group and only allow users of that > > > group to make write operations. I'll also check eht dbus auth to see > > > if that can help. Do you have in mind any operation->"security level" > > > map? > > > > come up with some proposals. I have real clue, but we should have some > > special rights for the current session user. > > > > Regards > > > > Marcel > > > > > > > > > > ------------------------------------------------------- > > This SF.net email is sponsored by: Splunk Inc. Do you grep through log = files > > for problems? Stop! Download the new AJAX search engine that makes > > searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! > > http://ads.osdn.com/?ad_id=3D7637&alloc_id=3D16865&op=3Dclick > > _______________________________________________ > > Bluez-devel mailing list > > Bluez-devel@lists.sourceforge.net > > https://lists.sourceforge.net/lists/listinfo/bluez-devel > > > > > -- > --------------------------------------------------------- > Claudio Takahasi > Instituto Nokia de Tecnologia - INdT > > > ------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. Do you grep through log fi= les > for problems? Stop! Download the new AJAX search engine that makes > searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! > http://ads.osdn.com/?ad_idv37&alloc_id=16865&opclick > _______________________________________________ > Bluez-devel mailing list > Bluez-devel@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/bluez-devel > -- Eduardo Rocha Instituto Nokia de Tecnologia - INdT ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click _______________________________________________ Bluez-devel mailing list Bluez-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bluez-devel