Files
flatpak/tests
Weng Xuetian 0402e1614c Limit the usage of WAYLAND_SOCKET to an opt-in feature
1. For security context creation, only relies on WAYLAND_DISPLAY, do not
   use WAYLAND_SOCKET since the file descriptor defined by WAYLAND_SOCKET
   can be only consumed once.
2. Due to the incompatiblity between WAYLAND_SOCKET and the security
   context, add a new permission --socket=inherit-wayland-socket
   to limit the usage of WAYLAND_SOCKET to an opt-in feature. Only when
   this flag is set, WAYLAND_SOCKET will be passed to the sandbox.
3. When WAYLAND_SOCKET is not inherited, set FD_CLOEXEC to avoid it to
   be leaked the to sandbox.

Closes: #5614
2024-02-14 19:39:50 +00:00
..
2022-10-24 16:12:14 +01:00
2022-10-24 16:12:14 +01:00
2022-10-24 16:12:14 +01:00
2019-12-17 14:55:13 +01:00
2016-02-25 19:03:09 +01:00
2022-10-24 16:12:14 +01:00
2020-03-20 15:37:10 +01:00
2024-02-13 08:20:57 -06:00
2024-02-13 08:20:57 -06:00
2022-08-22 19:48:10 -07:00
2022-10-24 16:12:14 +01:00