glib/docs/reference
Philip Withnall ba414ee100 giomodule: Ignore GIO_MODULE_DIR when running as setuid
Even if the modules in the given directory never get chosen to be used,
loading arbitrary code from a user-provided directory is not safe when
running as setuid, as the process’ environment comes from an untrusted
source.

Also ignore `GIO_EXTRA_MODULES`.

Spotted by Simon McVittie.

Signed-off-by: Philip Withnall <pwithnall@endlessos.org>

Fixes: #2168
2021-01-07 15:02:24 +00:00
..
2010-05-24 23:21:01 -04:00
1999-08-16 17:58:30 +00:00
1999-08-16 17:58:30 +00:00
1999-08-16 17:58:30 +00:00