mirror of
https://github.com/systemd/systemd.git
synced 2026-11-06 05:17:24 +00:00
umutcagand
ec10654958
Apply per-unit SELinux and polkit checks to batched D-Bus requests before allowing the job enqueue methods through the system bus policy. Include the unit and verb in each authorization request and bound the amount of work for unprivileged callers. Apply per-unit checks to Varlink batches too, resolving unit aliases before passing the canonical name to polkit. Fix the polkit query reference leak when consecutive replies share a pending defer event, and map reload-or-start to the SELinux start permission. Add integration coverage for bus policy, authorization, batch limits and Varlink aliases. Fixes #44289.