Unset LD_PRELOAD on startup (before dropping root)

LD_PRELOAD enables keyloggers to easily be made. This solution isn't
perfect - really a secure system wouldn't have LD_PRELOAD at all. It was
a stupid idea in the first place.

1 files changed, 2 insertions, 0 deletions

diff --git a/sway/main.c b/sway/main.c
index d396089c..1db88da2 100644
--- a/sway/main.c
+++ b/sway/main.c
@@ -220,6 +220,8 @@ int main(int argc, char **argv) {
                 "      --get-socketpath   Gets the IPC socket path and prints it, then exits.\n"
                 "\n";
 
+        unsetenv("LD_PRELOAD"); // Security
+
         int c;
         while (1) {
                 int option_index = 0;