luc14n0/glib
1
0
Fork 0
mirror of https://gitlab.gnome.org/GNOME/glib.git synced 2025-01-27 14:36:16 +01:00
Code Issues Packages Projects Releases Wiki Activity

docs: Document that GIO should not be used in privileged processes

Browse Source 
Signed-off-by: Philip Withnall <pwithnall@endlessos.org>

Fixes: #2289
This commit is contained in:
Philip Withnall 2023-04-28 11:11:03 +01:00
parent 9b8369852b
commit f42e04d247
1 changed files with 12 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
docs/reference/glib/programming.xml
View File

@ -43,7 +43,7 @@ support multithreaded applications.
</refsect2> </refsect2>
<refsect2> <refsect2>
<title>Security</title> <title>Security and setuid use</title>
<para> <para>
When writing code that runs with elevated privileges, it is important When writing code that runs with elevated privileges, it is important
@ -56,8 +56,17 @@ excellent book on this topic,
When it comes to GLib and its associated libraries, GLib and When it comes to GLib and its associated libraries, GLib and
GObject are generally fine to use in code that runs with elevated GObject are generally fine to use in code that runs with elevated
privileges; they don't load modules (executable code in shared objects) privileges; they don't load modules (executable code in shared objects)
or run other programs 'behind your back'. GIO has to be used or run other programs ‘behind your back’. GIO, however, is not designed to be
carefully in privileged programs, see the <ulink url="http://developer.gnome.org/gio/stable/ch02.html">GIO documentation</ulink> for details. used in privileged programs, either ones which are spawned by a privileged
process, or ones which are run with a setuid bit set.
</para>
<para>
setuid programs should always reset their environment to contain only
known-safe values before calling into non-trivial libraries such as GIO. This
reduces the risk of an attacker-controlled environment variable being used to
get a privileged GIO process to run arbitrary code via loading a GIO module or
similar.
</para> </para>
</refsect2> </refsect2>