Recently I have tried to improve the safety/security of my system by using Linux Security Modules LSM like (apparmor, grsecurity or NSA Selinux). In my case apparmor.
Trying to limit untrusted binary BLOB "Microsoft Skype" software I run into the problem that Skype effectively uses D-Bus. I fear now that potential risk linked to opening access to D-Bus and privilege escalation, in short open door caused by D-Bus if not configured correctly. (i.e. Something of this sort http://www.websecuritywatch.com/privilege-escalation-via-a-dbus-vilnerabilitiy/)
Is there a guide how I can configure D-Bus in a way that it limits the mischief and trouble a program can do? I would very much like to have a Guide that focuses on the safety configuration of D-Bus.
The only thing I have found at present is http://www.redhat.com/magazine/003jan05/features/dbus/#security
which is not very helpful and rather frustrating as to my understanding it suggests that the price for the D-Bus "functionality" is yet another extensive and overarching security setup in addition to the trouble to setup already the LSM.
This is why I would appreciate if somebody could indicate me if and where there is information about configuring D-Bus safely.