• Dima Ryazanov's avatar
    Don't look for weston.ini in the current working directory · ad0d83bd
    Dima Ryazanov authored
    It's a bit surprising that Weston looks different when launched from the root
    of the git repo vs from elsewhere.
    
    But it's also technically a security vulnerability: if I launch it from
    a directory like /tmp, it might pick up a weston.ini created by another user,
    which could then load modules with arbitrary code. Basically, it's the same
    problem as including "." in $PATH.
    Signed-off-by: Dima Ryazanov's avatarDima Ryazanov <dima@gmail.com>
    ad0d83bd
weston.man 11.1 KB