Skip to content

weak security concept of objectregistery  #316

Description

@idleroamer

As the current objectRegistery allows registering and un-registering arbitrary objectPaths on different service names, without verifying the origin of the caller, DoS attacks are possible as well as re-routing calls meant for other services to a different service.

interface ObjectRegistry {
bool registerObject(string objectPath, string serviceName);
bool unregisterObject(string objectPath, string serviceName);
map getObjects();
signal objectAdded(string objectPath, string serviceName, int version);
signal objectRemoved(string objectPath, int version);
}

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions