glib/docs/reference
Philip Withnall ba414ee100 giomodule: Ignore GIO_MODULE_DIR when running as setuid
Even if the modules in the given directory never get chosen to be used,
loading arbitrary code from a user-provided directory is not safe when
running as setuid, as the process’ environment comes from an untrusted
source.

Also ignore `GIO_EXTRA_MODULES`.

Spotted by Simon McVittie.

Signed-off-by: Philip Withnall <pwithnall@endlessos.org>

Fixes: #2168
2021-01-07 15:02:24 +00:00
..
gio giomodule: Ignore GIO_MODULE_DIR when running as setuid 2021-01-07 15:02:24 +00:00
glib gerror: Add support for extended errors 2021-01-06 15:44:59 +00:00
gobject docs: Mention GInitiallyUnowned when introducing refcounts 2020-12-12 18:47:00 +00:00
.gitignore .gitignore manpages (*.1) 2010-05-24 23:21:01 -04:00
AUTHORS Initial revision 1999-08-16 17:58:30 +00:00
COPYING Initial revision 1999-08-16 17:58:30 +00:00
meson.build gversionmacros: Add version macros for GLib 2.68 2020-10-01 14:33:21 +01:00
NEWS Initial revision 1999-08-16 17:58:30 +00:00