diff options
| author |  Felix Pehla <74104874+FelixPehla@users.noreply.github.com> | 2024-08-07 03:26:04 +0200 |
|---|---|---|
| committer |  GitHub <noreply@github.com> | 2024-08-07 01:26:04 +0000 |
| commit | de855222487b9633c3833a4d0ef77558c52b8e5b (patch) | |
| tree | d207284b2f53274373b67da6c9909b58c2007595 /test/fnetfilter/fnetfilter.sh | |
| parent | build(deps): bump step-security/harden-runner from 2.8.1 to 2.9.0 (diff) | |
| download | firejail-de855222487b9633c3833a4d0ef77558c52b8e5b.tar.gz firejail-de855222487b9633c3833a4d0ef77558c52b8e5b.tar.zst firejail-de855222487b9633c3833a4d0ef77558c52b8e5b.zip | |
profiles: blacklist sway IPC socket (#6429)
Much like the i3 IPC socket (#6361), the sway IPC socket also allows
arbitrary code execution via the `exec` subcommand. Access should only
be permitted to sway itself by default.
The location of the IPC socket is set in sway/ipc-server.c:
https://github.com/swaywm/sway/blob/7e74a4914261cf32c45017521960adf7ff6dac8f/sway/ipc-server.c#L126
Diffstat (limited to 'test/fnetfilter/fnetfilter.sh')
0 files changed, 0 insertions, 0 deletions