setuid safeness - ensure if an app that is setuid doesn't do bad things
authorCarsten Haitzler (Rasterman) <raster@rasterman.com>
Wed, 8 Jan 2014 10:46:23 +0000 (19:46 +0900)
committerCarsten Haitzler (Rasterman) <raster@rasterman.com>
Wed, 8 Jan 2014 10:46:23 +0000 (19:46 +0900)
commitb95ef3801f9719a8f8ff731e25d66a8d1dd417cd
tree258548da51b18d5fde17915bdc36cba44effcf40
parent323f293ab538ffc7431f6598736963a834c4f880
setuid safeness - ensure if an app that is setuid doesn't do bad things

this makes efl ignore certain env vars for thnigs and entirely removes
user modules (that no one ever used) etc. etc. to ensure that *IF* an
app is setuid, there isn't a priv escalation path that is easy.
31 files changed:
src/lib/ecore/ecore.c
src/lib/ecore/ecore_exe.c
src/lib/ecore_con/ecore_con_local.c
src/lib/ecore_con/ecore_con_local_win32.c
src/lib/ecore_con/ecore_con_socks.c
src/lib/ecore_evas/ecore_evas_module.c
src/lib/ecore_fb/ecore_fb.c
src/lib/ecore_fb/ecore_fb_ts.c
src/lib/ecore_imf/ecore_imf_module.c
src/lib/ecore_x/xcb/ecore_xcb_xdefaults.c
src/lib/edje/edje_edit.c
src/lib/edje/edje_module.c
src/lib/eeze/eeze_sensor.c
src/lib/efreet/efreet_base.c
src/lib/efreet/efreet_menu.c
src/lib/eina/eina_file_common.c
src/lib/eina/eina_mempool.c
src/lib/eina/eina_module.c
src/lib/eina/eina_prefix.c
src/lib/emotion/emotion_modules.c
src/lib/ethumb/ethumb.c
src/lib/evas/cserve2/evas_cs2_client.c
src/lib/evas/file/evas_module.c
src/modules/ecore_evas/engines/extn/ecore_evas_extn_buf.c
src/modules/emotion/generic/emotion_generic.c
src/modules/emotion/gstreamer/emotion_gstreamer.c
src/modules/emotion/gstreamer/emotion_sink.c
src/modules/emotion/gstreamer1/emotion_gstreamer.c
src/modules/evas/engines/fb/evas_fb_main.c
src/modules/evas/engines/gl_common/evas_gl_file_cache.c
src/modules/evas/engines/gl_x11/evas_engine.c