search

pigmonkey / firewarden

Open a file via the specified application within a private Firejail sandbox.
The Unlicense
74 stars 7 forks source link

Use XDG_RUNTIME_DIR environment variable (when available) to set temporary user home #3

Closed CameronNemo closed 7 years ago

CameronNemo commented 7 years ago

The XDG Base Directory spec states that this variable should be used for "user-specific runtime files and other file objects".

https://specifications.freedesktop.org/basedir-spec/basedir-spec-latest.html

Using it also helps ensure that no other unpriveleged users read or change the data in the jail, which is possible when the jail is built in /tmp/.

pigmonkey commented 7 years ago

Thanks.