Philip Withnall ba414ee100 giomodule: Ignore GIO_MODULE_DIR when running as setuid ...

Even if the modules in the given directory never get chosen to be used,
loading arbitrary code from a user-provided directory is not safe when
running as setuid, as the process’ environment comes from an untrusted
source.

Also ignore `GIO_EXTRA_MODULES`.

Spotted by Simon McVittie.

Signed-off-by: Philip Withnall <pwithnall@endlessos.org>

Fixes: #2168

2021-01-07 15:02:24 +00:00

..

gio

giomodule: Ignore GIO_MODULE_DIR when running as setuid

2021-01-07 15:02:24 +00:00

glib

gerror: Add support for extended errors

2021-01-06 15:44:59 +00:00

gobject

docs: Mention GInitiallyUnowned when introducing refcounts

2020-12-12 18:47:00 +00:00

.gitignore

.gitignore manpages (*.1)

2010-05-24 23:21:01 -04:00

AUTHORS

Initial revision

1999-08-16 17:58:30 +00:00

COPYING

Initial revision

1999-08-16 17:58:30 +00:00

meson.build

gversionmacros: Add version macros for GLib 2.68

2020-10-01 14:33:21 +01:00

NEWS

Initial revision

1999-08-16 17:58:30 +00:00