Copy XDG_RUNTIME_DIR and WAYLAND_DISPLAY

Duncaen / OpenDoas

A portable fork of the OpenBSD `doas` command

Other

610 stars 35 forks source link

Copy XDG_RUNTIME_DIR and WAYLAND_DISPLAY #69

Closed emersion closed 3 years ago

emersion commented 3 years ago

This allows to run Wayland clients under doas.

Duncaen commented 3 years ago

Not sure about allowing XDG_RUNTIME_DIR by default, this seems like something that is going to be exploitable in some way.

emersion commented 3 years ago

How so?

Duncaen commented 3 years ago

Its like passing through HOME by default. The user might be allowed to execute something specific and would now be able to read or write from/to a user defined directory through that allowed execution.

emersion commented 3 years ago

Fair enough.