view docker/backend-dev/session.conf @ 4212:5f2d496c633f

core: get rid of `pickle`: Use of `pickle` to serialise data was a technical legacy that was causing trouble to store in database, to update (if a class was serialised, a change could break update), and to security (pickle can lead to code execution). This patch remove all use of Pickle in favour in JSON, notably: - for caching data, a Pydantic model is now used instead - for SQLAlchemy model, the LegacyPickle is replaced by JSON serialisation - in XEP-0373 a class `PublicKeyMetadata` was serialised. New method `from_dict` and `to_dict` method have been implemented to do serialisation. - new methods to (de)serialise data can now be specified with Identity data types. It is notably used to (de)serialise `path` of avatars. A migration script has been created to convert data (for upgrade or downgrade), with special care for XEP-0373 case. Depending of size of database, this migration script can be long to run. rel 443
author Goffi <goffi@goffi.org>
date Fri, 23 Feb 2024 13:31:04 +0100
parents fd3fe346a14a
children
line wrap: on
line source

<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-Bus Bus Configuration 1.0//EN"
"http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>
	<type>session</type>
	<keep_umask/>
	<listen>unix:path=/home/libervia/.local/share/dbus_socket</listen>
	<listen>tcp:host=localhost,bind=*,port=55555,family=ipv4</listen>
	<auth>ANONYMOUS</auth>
	<allow_anonymous/>
	<standard_session_servicedirs />
	<policy context="default">
		<allow send_destination="*" eavesdrop="true"/>
		<allow eavesdrop="true"/>
		<allow own="*"/>
	</policy>
	<include if_selinux_enabled="yes" selinux_root_relative="yes">contexts/dbus_contexts</include>
	<limit name="max_incoming_bytes">1000000000</limit>
	<limit name="max_incoming_unix_fds">250000000</limit>
	<limit name="max_outgoing_bytes">1000000000</limit>
	<limit name="max_outgoing_unix_fds">250000000</limit>
	<limit name="max_message_size">1000000000</limit>
	<limit name="service_start_timeout">120000</limit>
	<limit name="auth_timeout">240000</limit>
	<limit name="pending_fd_timeout">150000</limit>
	<limit name="max_completed_connections">100000</limit>
	<limit name="max_incomplete_connections">10000</limit>
	<limit name="max_connections_per_user">100000</limit>
	<limit name="max_pending_service_starts">10000</limit>
	<limit name="max_names_per_connection">50000</limit>
	<limit name="max_match_rules_per_connection">50000</limit>
	<limit name="max_replies_per_connection">50000</limit>
</busconfig>