[at-spi2-core: 1/2] Use unix sockets instead of abstract sockets
- From: Mike Gorse <mgorse src gnome org>
- To: commits-list gnome org
- Cc:
- Subject: [at-spi2-core: 1/2] Use unix sockets instead of abstract sockets
- Date: Mon, 28 Dec 2020 16:53:08 +0000 (UTC)
commit 3332ae21f27559f69bd631cdb845bb81613bd45e
Author: Tianon Gravi <admwiggin gmail com>
Date: Thu Dec 24 08:24:40 2020 -0800
Use unix sockets instead of abstract sockets
Quoting Michael Catanzaro:
> Secure host services must not use abstract sockets.
>
> - If your sandboxed application uses --share=net to access the host
> network namespace, which is required for internet access, then it
> gets access to all the host's abstract sockets as well. Loads of
> sandboxed applications necessarily have to use --share=net.
>
> - If your sandboxed application does not use --share=net, it cannot
> access any host abstract sockets.
This also requires bumping the minimum glib version to 2.62.
bus/accessibility.conf.in | 2 +-
meson.build | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
---
diff --git a/bus/accessibility.conf.in b/bus/accessibility.conf.in
index 31b6a792..79c51464 100644
--- a/bus/accessibility.conf.in
+++ b/bus/accessibility.conf.in
@@ -6,7 +6,7 @@
<servicedir>@DATADIR@/dbus-1/accessibility-services</servicedir>
<auth>EXTERNAL</auth>
- <listen>unix:tmpdir=/tmp</listen>
+ <listen>unix:dir=/tmp</listen>
<policy context="default">
<!-- Allow root to connect -->
diff --git a/meson.build b/meson.build
index 73bfe7db..0b2474bf 100644
--- a/meson.build
+++ b/meson.build
@@ -44,7 +44,7 @@ endif
# Dependencies
libdbus_req_version = '>= 1.5'
-glib_req_version = '>= 2.32.0'
+glib_req_version = '>= 2.62.0'
gobject_req_version = '>= 2.0.0'
gio_req_version = '>= 2.28.0'
[
Date Prev][
Date Next] [
Thread Prev][
Thread Next]
[
Thread Index]
[
Date Index]
[
Author Index]