File backintime-dbus_cve_2017_7572.patch of Package backintime.7502

Overview Repositories Revisions Requests Users Attributes Meta

File backintime-dbus_cve_2017_7572.patch of Package backintime.7502

diff --git a/qt/serviceHelper.py b/qt4/serviceHelper.py
index d45d99e..ec643c1 100644
--- a/qt4/serviceHelper.py
+++ b/qt4/serviceHelper.py
@@ -282,18 +282,12 @@ def _checkPolkitPrivilege(self, sender, conn, privilege):
             # bus, and it does not make sense to restrict operations here
             return
 
-        info = SenderInfo(sender, conn)
-
-        # get peer PID
-        pid = info.connectionPid()
-
         # query PolicyKit
         self._initPolkit()
         try:
             # we don't need is_challenge return here, since we call with AllowUserInteraction
             (is_auth, _, details) = self.polkit.CheckAuthorization(
-                    ('unix-process', {'pid': dbus.UInt32(pid, variant_level=1),
-                    'start-time': dbus.UInt64(0, variant_level=1)}),
+                    ('system-bus-name', {'name': dbus.String(sender, variant_level=1)}),
                     privilege, {'': ''}, dbus.UInt32(1), '', timeout=3000)
         except dbus.DBusException as e:
             if e._dbus_error_name == 'org.freedesktop.DBus.Error.ServiceUnknown':

Places

File backintime-dbus_cve_2017_7572.patch of Package backintime.7502

Places