6 ms·
Sounds like a security hole: non-whitelisted malicious app launches whitelisted app as an external process, and then mayhem ensues.
by mercurial 12y ago
Sounds like a security hole: non-whitelisted malicious app launches whitelisted app as an external process, and then mayhem ensues.
- jhasse 12y agoUser permission should be required when launching external processes.
- wtallis 12y agoAnd whitelisted processes don't have to take input from anything other than the user himself; a command-line screenshot tool that can be run by any program and doesn't ask for interactive confirmation through a trusted channel (ie. keyboard events directed into its own window by the compositor itself) would be a pretty stupid thing to whitelist unless you've got proper sandboxing for any untrusted apps.