lirios / shell

:shell: Convergent shell for desktops, phones and tables built with QtQuick, Wayland and Material Design
GNU General Public License v3.0
232 stars 14 forks source link

Disallow running as root #140

Closed plfiorini closed 6 years ago

plfiorini commented 6 years ago

The shell is not hardened enough to run as root.

If run as root, malicious applications could attack the shell and execute random code or try to gain more privileges exploiting it.

We already use logind to give unprivileged users access to DRI and input devices, this removes the need for running the shell as root.

Throw an error and exit if the uid is 0.