Skip to content
Commit b52da3d2 authored by Philip Withnall's avatar Philip Withnall
Browse files

gdbusaddress: Ignore D-Bus addresses from the environment when setuid



As with the previous commit, it’s unsafe to trust the environment when
running as setuid, as it comes from an untrusted caller. In particular,
with D-Bus, the caller could set up a fake ‘system’ bus which fed
incorrect data to this process.

Signed-off-by: default avatarPhilip Withnall <pwithnall@endlessos.org>

Helps: #2168
parent 5bdda2a6
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment