Giuseppe Scrivano b51e3ab09e GDBusServer: Accept empty authorization identity for EXTERNAL mechanism
RFC 4422 appendix A defines the empty authorization identity to mean
the identity that the server associated with its authentication
credentials. In this case, this means whatever uid is in the
GCredentials object.

In particular, this means that clients in a different Linux user
namespace can authenticate against our server and will be authorized
as the version of their uid that is visible in the server's namespace,
even if the corresponding numeric uid returned by geteuid() in the
client's namespace was different. systemd's sd-bus has relied on this
since commit
1ed4723d38.

[Originally part of a larger commit; commit message added by smcv]

Signed-off-by: Simon McVittie <smcv@collabora.com>
2022-07-18 17:53:32 +01:00
..
2022-06-17 08:49:03 -05:00
2022-06-23 10:46:45 +01:00
2022-06-23 10:46:45 +01:00
2022-05-18 14:01:43 +00:00
2022-06-09 17:08:42 +02:00
2022-06-23 10:46:45 +01:00
2022-06-23 10:46:45 +01:00