Sebastian Wick 873ed8b371
run: Use O_PATH fds for the runtime and app deploy directories ...
This also allows us to use glnx_chaseat, and other at-functions to
traverse the filesystem tree in a safe way.
This is important because the app and runtime deploy directories can be
under an attackers control. The flatpak portal for example allows
sandboxed apps to provide them.
In particular, attacks where the deploy dirs get replaced by a symlink
pointing into the host system will be stopped by this.
Note that this change alone is not enough to avoid the attack, and the
portal has to be changed as well.
2026-04-07 16:17:51 -04:00
2019-10-03 10:42:04 +02:00
2024-03-12 08:31:08 -05:00
2019-12-19 10:33:21 +01:00
2022-08-22 19:48:10 -07:00
2024-07-09 17:12:55 -03:00
2021-02-12 15:58:09 +01:00
2026-04-07 16:17:51 -04:00
2026-04-07 16:17:51 -04:00
2019-09-19 16:53:11 +00:00
2019-09-19 16:53:11 +00:00
2021-01-12 09:55:23 +01:00
2024-10-16 14:11:56 -03:00
2026-04-07 16:17:51 -04:00
2025-12-01 11:04:56 -05:00
2024-07-09 17:12:55 -03:00
2024-07-09 17:12:55 -03:00
2026-04-07 16:17:51 -04:00
2022-09-07 09:21:58 +02:00
2022-09-07 09:21:58 +02:00
2019-02-25 18:12:30 +00:00
2021-02-09 09:36:59 +01:00
2023-07-03 20:07:57 +02:00
2024-10-15 13:53:07 +01:00
2023-05-17 11:35:44 +01:00
2023-05-17 11:35:44 +01:00
2019-10-02 14:57:11 +02:00
2026-04-07 16:17:51 -04:00
2021-06-14 15:30:59 +01:00
2020-11-05 10:43:10 +01:00
2023-02-04 12:30:15 -06:00
2021-02-12 15:58:09 +01:00
2023-10-27 17:09:52 +01:00
2023-10-27 17:09:52 +01:00
2021-02-12 15:58:09 +01:00
2023-05-17 11:35:44 +01:00
2020-06-05 09:35:30 +02:00
2025-12-01 11:04:56 -05:00
2018-08-09 12:49:36 +00:00
2022-08-22 19:48:10 -07:00
2023-11-14 18:39:22 +00:00
2024-03-27 14:22:45 +00:00
2024-10-16 14:11:56 -03:00
2024-07-09 17:12:55 -03:00
2025-11-14 20:14:30 +05:30
2019-10-03 10:42:04 +02:00
2022-12-15 16:45:35 +00:00
2018-04-26 07:41:17 +00:00
2019-12-01 14:04:59 -05:00
2020-03-27 17:23:13 +01:00
2022-12-15 16:45:35 +00:00
2024-07-09 17:12:55 -03:00
2025-04-30 14:00:20 +00:00
2023-07-03 20:07:57 +02:00
2024-07-09 17:12:55 -03:00
2024-07-09 17:12:55 -03:00
2021-02-12 15:58:09 +01:00
2020-03-23 17:58:04 +01:00
2022-08-22 19:48:10 -07:00
2021-02-12 15:58:09 +01:00
2020-03-25 08:52:28 +01:00
2020-11-05 10:43:10 +01:00
2025-01-09 17:00:07 +01:00
2021-02-12 15:58:09 +01:00
2024-07-09 17:12:55 -03:00
2021-02-12 15:58:09 +01:00
2025-01-09 17:00:07 +01:00
2025-11-14 20:14:30 +05:30
2023-05-15 19:54:51 +01:00
2023-05-15 19:54:51 +01:00
2024-08-29 14:11:50 -03:00
2025-03-31 12:41:32 +00:00
2026-04-07 16:17:51 -04:00
2023-05-15 19:54:51 +01:00
2023-05-15 19:54:51 +01:00
2023-08-24 12:17:53 +02:00
2025-03-27 20:04:13 +00:00
2025-03-27 20:04:13 +00:00
2025-03-27 20:04:13 +00:00
2023-05-15 19:54:51 +01:00
2023-09-04 13:25:32 +01:00
2026-04-07 16:17:51 -04:00
2021-10-08 12:53:20 +02:00
2021-05-19 09:49:30 +02:00
2025-12-01 11:04:56 -05:00
2023-03-30 14:54:18 +02:00
2022-09-06 13:20:05 +02:00
2022-09-07 09:21:19 +02:00
2024-10-16 14:11:56 -03:00
2024-10-16 14:11:56 -03:00
2024-06-21 11:12:57 -03:00
2024-06-21 11:12:57 -03:00
2025-05-08 16:08:21 +00:00
2025-12-03 19:34:17 -05:00
2026-04-07 16:17:51 -04:00
2026-04-07 16:17:51 -04:00
2019-12-02 07:45:51 -05:00
2024-05-03 13:21:29 +01:00
2024-05-03 13:21:29 +01:00
2020-06-05 09:35:30 +02:00
2020-06-05 09:35:30 +02:00
2018-05-24 11:59:52 +00:00
2018-10-08 08:36:23 +00:00
2025-02-15 12:33:28 +01:00
2022-04-11 10:32:34 +02:00
2019-04-08 12:50:42 +00:00
873ed8b371