Philip Withnall 5bdda2a6b5 giomodule: Ignore GIO_MODULE_DIR when running as setuid ...

Even if the modules in the given directory never get chosen to be used,
loading arbitrary code from a user-provided directory is not safe when
running as setuid, as the process’ environment comes from an untrusted
source.

Also ignore `GIO_EXTRA_MODULES`.

Spotted by Simon McVittie.

Signed-off-by: Philip Withnall <pwithnall@endlessos.org>

Fixes: #2168

2021-01-07 17:14:12 +00:00

..

reference

giomodule: Ignore GIO_MODULE_DIR when running as setuid

2021-01-07 17:14:12 +00:00

CODEOWNERS

CODEOWNERS: Add myself as co-owner of Windows stuff

2019-08-27 12:57:32 +05:30

debugging.txt

tree: Fix various typos and outdated terminology

2020-06-12 15:01:08 +01:00

macros.txt

Meson: Add glib_checks and glib_asserts options

2020-04-09 09:17:35 -04:00