Comment 47 for bug 149275

libosso> The current dbus policy still allows anyone to own the osso service on the system bus. Ideally this thing would exclusively use the user's session bus, since it already seems to be per-user (i. e. there is no system daemon which provides that service, it's only a client side library). With that, an user cannot hijack the osso service of another user, and you could actually run two parallel users sessions.