Allow full paths to sockets on non-macOS (!30) · Merge requests · xorg / lib / libxcb

Demi Marie Obenour requested to merge DemiMarie/libxcb:allow-full-paths into master Jul 03, 2022

When combined with libxtrans!7 (merged), this allows CVE-2020-25697 to be mitigated by placing the AF_UNIX socket in a secure directory on the filesystem.

This enables HAVE_LAUNCHD unconditionally and deletes the configure switch. It also drops abstract socket support. This MR is sufficient for xcb, but libxtrans!7 (merged) is needed for Xlib.

Signed-off-by: Demi Marie Obenour demiobenour@gmail.com

Edited Aug 13, 2022 by Demi Marie Obenour

Allow full paths to sockets on non-macOS

Merge request reports