Merge pull request #476 from PixlOne/fix-cve-2024-45752

Fix CVE-2024-45752
PixlOne · Sep 28, 2024 · 628ab93 · 628ab93
2 parents 237fa5f + 9495516
commit 628ab93
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/src/logid/logiops-dbus.conf.in b/src/logid/logiops-dbus.conf.in
@@ -3,11 +3,12 @@
  "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
 
 <busconfig>
-  <policy user="root">
-    <allow own="pizza.pixl.LogiOps"/>
+  <policy context="default">
+    <deny receive_sender="pizza.pixl.LogiOps"/>
   </policy>
 
-  <policy context="default">
+  <policy user="root">
+    <allow own="pizza.pixl.LogiOps"/>
     <allow send_destination="pizza.pixl.LogiOps"/>
     <allow receive_sender="pizza.pixl.LogiOps"/>
   </policy>