From 15797791199a325977fb6b6108175c6bb086c7da Mon Sep 17 00:00:00 2001 From: Lubomir Rintel Date: Sat, 16 Apr 2016 20:39:45 +0200 Subject: [PATCH] nm: Don't do in dbus service file It does more than intended; apart from denying messages to that particular interface it also denies all messages non-qualified with an interface globally. This blocks messages completely unrelated to strongSwan's VPN plugin, such as NetworkManager communication with the VPN plugins. From the dbus-daemon manual: Be careful with send_interface/receive_interface, because the interface field in messages is optional. In particular, do NOT specify ! This will cause no-interface messages to be blocked for all services, which is almost certainly not what you intended. Always use rules of the form: We can just safely remove those rules, since we're sufficiently protected by the send_destination matches and method calls are disallowed by default anyway. Closes strongswan/strongswan#42. --- src/charon-nm/nm-strongswan-service.conf | 1 - 1 file changed, 1 deletion(-) diff --git a/src/charon-nm/nm-strongswan-service.conf b/src/charon-nm/nm-strongswan-service.conf index dccc19af9..a630f3407 100644 --- a/src/charon-nm/nm-strongswan-service.conf +++ b/src/charon-nm/nm-strongswan-service.conf @@ -10,7 +10,6 @@ -