From 477ff5df4ec39ad26bf719cdc574b5d3965f323a Mon Sep 17 00:00:00 2001
From: nalin <nalin>
Date: Jan 08 2008 17:03:32 +0000
Subject: * src/oddjobd.c: actually revoke one-shots for 'list' methods


---

diff --git a/src/oddjobd.c b/src/oddjobd.c
index daae385..9fe1c21 100644
--- a/src/oddjobd.c
+++ b/src/oddjobd.c
@@ -60,7 +60,7 @@
 #include "oddjob_dbus.h"
 #include "util.h"
 
-#ident "$Id: oddjobd.c,v 1.46.2.3 2008/01/07 21:02:57 nalin Exp $"
+#ident "$Id: oddjobd.c,v 1.46.2.4 2008/01/08 17:03:32 nalin Exp $"
 
 #define ODDJOB_INTROSPECTION_HEADER \
 "<!DOCTYPE node \n"\
@@ -328,7 +328,7 @@ check_one_ac_match(struct oddjob_acl *acl, const char *user, unsigned long uid,
 	       ((!acl->apply_polkit_action) ||
 	        (oddjob_dbus_message_sender_has_polkit_action(msg,
 							      acl->polkit_action,
-							      (acl->sense == oddjob_acl_allow),
+							      really,
 							      really)));
 }
 
@@ -2120,7 +2120,7 @@ oddjobd_list_methods(struct oddjob_dbus_context *ctx,
 			service_name, object_path, interface_name, method_name,
 			user);
 	}
-	if (check_method_acl(method, user, uid, client_secontext, msg, FALSE) !=
+	if (check_method_acl(method, user, uid, client_secontext, msg, TRUE) !=
 	    oddjob_acl_allow) {
 		if (globals.debug) {
 			fprintf(stderr, "Request for \"%s\" denied.\n",
@@ -2250,7 +2250,7 @@ oddjobd_introspect_method(struct oddjob_dbus_context *ctx,
 
 	if (check_method_acl(method, user, uid,
 			     oddjob_dbus_message_get_selinux_context(msg),
-			     msg, FALSE) !=
+			     msg, TRUE) !=
 	    oddjob_acl_allow) {
 		if (globals.debug) {
 			fprintf(stderr, "Request for \"%s\" denied to %s.\n",