summaryrefslogtreecommitdiffstats
path: root/sway/main.c
diff options
context:
space:
mode:
Diffstat (limited to 'sway/main.c')
-rw-r--r--sway/main.c2
1 files changed, 2 insertions, 0 deletions
diff --git a/sway/main.c b/sway/main.c
index eb103a1e..157c61b3 100644
--- a/sway/main.c
+++ b/sway/main.c
@@ -152,6 +152,7 @@ static void security_sanity_check() {
152 sway_log(L_ERROR, 152 sway_log(L_ERROR,
153 "!! DANGER !! /proc is not available - sway CANNOT enforce security rules!"); 153 "!! DANGER !! /proc is not available - sway CANNOT enforce security rules!");
154 } 154 }
155#ifdef __linux__
155 cap_flag_value_t v; 156 cap_flag_value_t v;
156 cap_t cap = cap_get_proc(); 157 cap_t cap = cap_get_proc();
157 if (!cap || cap_get_flag(cap, CAP_SYS_PTRACE, CAP_PERMITTED, &v) != 0 || v != CAP_SET) { 158 if (!cap || cap_get_flag(cap, CAP_SYS_PTRACE, CAP_PERMITTED, &v) != 0 || v != CAP_SET) {
@@ -161,6 +162,7 @@ static void security_sanity_check() {
161 if (cap) { 162 if (cap) {
162 cap_free(cap); 163 cap_free(cap);
163 } 164 }
165#endif
164 if (!stat(SYSCONFDIR "/sway", &s)) { 166 if (!stat(SYSCONFDIR "/sway", &s)) {
165 if (s.st_uid != 0 || s.st_gid != 0 167 if (s.st_uid != 0 || s.st_gid != 0
166 || (s.st_mode & S_IWGRP) || (s.st_mode & S_IWOTH)) { 168 || (s.st_mode & S_IWGRP) || (s.st_mode & S_IWOTH)) {