[Dev] Cynara session ID

Jussi Laako jussi.laako at linux.intel.com
Fri May 16 07:56:09 GMT 2014


On 15.5.2014 21:22, Patrick Ohly wrote:
>          client_session - /string/ - identifier of application life or
>          session. It might be needed for checking access granted for
>          single session. It is service responsibility to define session
>          properly, e.g. it can be defined as PID of application process
>          or service-application connection identifier. libCynara do not
>          interpret this string - it is just compared to previous ones to
>          distinguish sessions.
>
> I can image that a modified dbus-daemon can be configured to map a
> certain interface or certain methods in an interface to certain
> privileges, but configuring it to somehow create a client_session string
> for a certain caller is probably going too far. Such functionality is
> better provided by custom code in the service itself.

It already knows about client PID, but it can also provide other 
information about the dbus connection (usually there should be a 
separate connection for each application).

So I don't see any issues here.



More information about the Dev mailing list