From dff6573b7256ad0c5f597818e44787210acd415d Mon Sep 17 00:00:00 2001
From: zhangkun <zhangkun2@uniontech.com>
Date: Thu, 11 Jun 2026 10:50:12 +0800
Subject: [PATCH] fix(wallpapercache): restrict bus name ownership
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

1. Remove default ownership permission for WallpaperCache on the system bus.
2. Keep method call permissions unchanged for existing local callers.
3. Limit service name ownership to root and deepin-daemon.

Log: Restrict WallpaperCache system bus ownership to trusted service users.

fix(wallpapercache): 限制总线服务名拥有权限

1. 移除 WallpaperCache 在 system bus 上的默认拥有权限。
2. 保持现有本地调用方的方法调用权限不变。
3. 将服务名拥有权限限制为 root 和 deepin-daemon。

Log: 将 WallpaperCache system bus 服务名拥有权限限制为可信服务用户。
PMS: BUG-365669
---
 .../wallpapercache/misc/org.deepin.dde.WallpaperCache.conf     | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/src/plugin-qt/wallpapercache/misc/org.deepin.dde.WallpaperCache.conf b/src/plugin-qt/wallpapercache/misc/org.deepin.dde.WallpaperCache.conf
index 0bce5a5..5bdf3b2 100644
--- a/src/plugin-qt/wallpapercache/misc/org.deepin.dde.WallpaperCache.conf
+++ b/src/plugin-qt/wallpapercache/misc/org.deepin.dde.WallpaperCache.conf
@@ -15,7 +15,6 @@
 
   <!-- Allow anyone to invoke methods on the interfaces -->
   <policy context="default">
-    <allow own="org.deepin.dde.WallpaperCache"/>
     <allow send_destination="org.deepin.dde.WallpaperCache"/>
 
     <allow send_destination="org.deepin.dde.WallpaperCache"
@@ -26,4 +25,4 @@
            send_interface="org.freedesktop.DBus.Introspectable"/>
   </policy>
 
-</busconfig>
\ No newline at end of file
+</busconfig>