diff options
| author | Alois Wohlschlager <alois1@gmx-topmail.de> | 2023-09-08 19:21:22 +0200 |
|---|---|---|
| committer | Alois Wohlschlager <alois1@gmx-topmail.de> | 2023-09-08 19:21:22 +0200 |
| commit | bd0cbb43ec48dedd399c72b3bc04f980041ed20b (patch) | |
| tree | 3565c499ce96e2c4bd1882ab41705b6fa5ab88d2 /pkgs/development/python-modules/python-mapnik/python-mapnik_std_optional.patch | |
| parent | a5523118048cf4ff7db3c629277b8192b12cb7b8 (diff) | |
nixos/plasma5: remove pointless setuid wrappers
The module for Plasma 5 contained two pointless setuid wrappers:
* kscreenlocker_greet was introduced when the kscreenlocker package
dropped kcheckpass. However, this was actually replaced by making
proper use of PAM (which finally calls its unix_chkpwd setuid binary).
kscreenlocker_greet itself was never intended to be setuid.
Fortunately, this is not exploitable, because QCoreApplication
immediately aborts if it detects setuid. The wrapper is still
incorrect and pointless, so remove it.
* start_kdeinit can optionally use setuid root or setcap
CAP_SYS_RESOURCE to reduce its OOM killer score. However, with systemd
startup, start_kdeinit does not get used at all. So in this case, the
setuid wrapper is pointless, and so is removed as well. Ideally, the
case where systemd startup is not enabled would use a capability
wrapper instead, but since systemd startup is the default in NixOS and
kinit is deprecated upstream for KF6, I don't bother any more.
Diffstat (limited to 'pkgs/development/python-modules/python-mapnik/python-mapnik_std_optional.patch')
0 files changed, 0 insertions, 0 deletions