Skip to content

Commit 8cb2ded

Browse files
Prince213erig0
authored andcommitted
fix(policy): use PK_ACTION_CONFIG for set{ZoneSettings2,PolicySettings}
Reference: https://access.redhat.com/security/cve/cve-2026-4948 (cherry picked from commit 5fb3914)
1 parent b1276a0 commit 8cb2ded

1 file changed

Lines changed: 2 additions & 2 deletions

File tree

src/firewall/server/firewalld.py

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -941,7 +941,7 @@ def getZoneSettings2(self, zone, sender=None):
941941
log.debug1("getZoneSettings2(%s)", zone)
942942
return self.fw.zone.get_config_with_settings_dict(zone)
943943

944-
@dbus_polkit_require_auth(config.dbus.PK_ACTION_CONFIG_INFO)
944+
@dbus_polkit_require_auth(config.dbus.PK_ACTION_CONFIG)
945945
@dbus_service_method(config.dbus.DBUS_INTERFACE_ZONE, in_signature="sa{sv}")
946946
@dbus_handle_exceptions
947947
def setZoneSettings2(self, zone, settings, sender=None):
@@ -977,7 +977,7 @@ def getPolicySettings(self, policy, sender=None):
977977
log.debug1("policy.getPolicySettings(%s)", policy)
978978
return self.fw.policy.get_config_with_settings_dict(policy)
979979

980-
@dbus_polkit_require_auth(config.dbus.PK_ACTION_CONFIG_INFO)
980+
@dbus_polkit_require_auth(config.dbus.PK_ACTION_CONFIG)
981981
@dbus_service_method(config.dbus.DBUS_INTERFACE_POLICY, in_signature="sa{sv}")
982982
@dbus_handle_exceptions
983983
def setPolicySettings(self, policy, settings, sender=None):

0 commit comments

Comments
 (0)