Qt D-Bus Security Considerations

This page covers security considerations for applications using Qt D-Bus.

Exporting QObjects directly

QDBusConnection::registerObject() can export a QObject's own slots directly, by passing ExportNonScriptableSlots or ExportAllSlots. Doing so makes all of that object's invocables accessible remotely, including those inherited from any superclass, not only the ones declared on the object's own class. Only QObject's own built-in slots (such as deleteLater()) are excluded.

If you need precise, explicit control over which methods are bus-callable, use the adaptor pattern instead. See Using Qt D-Bus Adaptors for details.