aboutsummaryrefslogtreecommitdiffstats
path: root/sway/sway-security.7.txt
diff options
context:
space:
mode:
authorLibravatar Drew DeVault <sir@cmpwn.com>2016-12-02 10:29:50 -0500
committerLibravatar Drew DeVault <sir@cmpwn.com>2016-12-02 10:29:50 -0500
commitc61746a15b78bcd22ca473345ff164ff2c9de973 (patch)
tree34d5d16ec773c124877d8255e22a8b20947ca438 /sway/sway-security.7.txt
parentDeal with LD_LIBRARY_PATH (diff)
downloadsway-c61746a15b78bcd22ca473345ff164ff2c9de973.tar.gz
sway-c61746a15b78bcd22ca473345ff164ff2c9de973.tar.zst
sway-c61746a15b78bcd22ca473345ff164ff2c9de973.zip
Soften up environment security
So no one gets their feewings hurt
Diffstat (limited to 'sway/sway-security.7.txt')
-rw-r--r--sway/sway-security.7.txt11
1 files changed, 4 insertions, 7 deletions
diff --git a/sway/sway-security.7.txt b/sway/sway-security.7.txt
index b6f18e80..ec11f10b 100644
--- a/sway/sway-security.7.txt
+++ b/sway/sway-security.7.txt
@@ -39,12 +39,9 @@ you choose to place it in other locations.
39Environment security 39Environment security
40-------------------- 40--------------------
41 41
42LD_PRELOAD is a mechanism designed by GNU for the purpose of ruining the security 42LD_PRELOAD is a mechanism designed to ruin the security of your system. There are
43of your system. One of the many ways LD_PRELOAD kills security is by making 43a number of strategies for dealing with this but they all suck a little. In order
44Wayland keyloggers possible. 44of most practical to least practical:
45
46There are a number of strategies for dealing with this but they all suck a little.
47In order of most practical to least practical:
48 45
491. Only run important programs via exec. Sway's exec command will ensure that 461. Only run important programs via exec. Sway's exec command will ensure that
50 LD_PRELOAD is unset when running programs. 47 LD_PRELOAD is unset when running programs.
@@ -54,7 +51,7 @@ In order of most practical to least practical:
54 but this is the most effective solution. 51 but this is the most effective solution.
55 52
563. Use static linking for important programs. Of course statically linked programs 533. Use static linking for important programs. Of course statically linked programs
57 are unaffected by the security dumpster fire that is dynamic linking. 54 are unaffected by the dynamic linking security dumpster fire.
58 55
59Note that should you choose method 1, you MUST ensure that sway itself isn't 56Note that should you choose method 1, you MUST ensure that sway itself isn't
60compromised by LD_PRELOAD. It probably isn't, but you can be sure by setting 57compromised by LD_PRELOAD. It probably isn't, but you can be sure by setting