Fix code to be more secure 19/184319/1
authorSemun Lee <semun.lee@samsung.com>
Tue, 17 Jul 2018 07:43:20 +0000 (16:43 +0900)
committerSemun Lee <semun.lee@samsung.com>
Tue, 17 Jul 2018 07:43:20 +0000 (16:43 +0900)
commitb37888c703156a1220e295efdaddbc924ce7cc86
tree868f3cbf869da58002f04a58f14ec6b55b8a8840
parent0596ed55a9567cc0233c56d7bc53584a28484f61
Fix code to be more secure

- dlopen with absolute path to prevent LD_LIBRARY_PATH attack
- add "x" to prevent symlink attack for recovery file creation

Change-Id: I5f94740e1fd7e1df6c711767d63b624d829b399b
Signed-off-by: Semun Lee <semun.lee@samsung.com>
src/common/app2ext_dynamic_service.cc
src/common/plugins/plugin.cc
src/common/recovery_file.cc