timlau / yumex-dnf-old

Next Generation of Yum Extender using DNF as backend
GNU General Public License v2.0
61 stars 17 forks source link

[Security/Safety] Use privileged dnfdaemon-system only where necessary #150

Closed genodeftest closed 3 years ago

genodeftest commented 7 years ago

Currently, dnfdaemon-system is started when yumex-dnf starts and is used for all operations involving dnf such as getting any package list or metadata or search. dnfdaemon-system is running as root and as such is a potential risk of security bugs.

I'd expect yumex-dnf to run without its root backend for most situations.

The only situations where root privileges are required are

timlau commented 3 years ago

It is a mess to switch between system & session API, metadata has to be loaded twice, memory usage will be much higher etc