webmacs icon indicating copy to clipboard operation
webmacs copied to clipboard

Published 20 hours ago • verified publisher icon parkouss

/tmp/webmacs.ipc can be read by all users

Open TLATER opened this issue 5 years ago • 1 comments

While going through #104 again, I noticed that webmacs' /tmp/webmacs.ipc has 755 permissions on my system. I don't know much about python's IPC server, or how it is currently used in this project, but I imagine that this could be used by other users to monitor webmacs usage. This is a little creepy, and sounds like a security issue waiting to happen (although I'm not sure anything malicious could be done through the current interface).

That said, I believe it should anyway be moved to /run/<uid> and more properly secured as part of #104.

TLATER avatar Feb 21 '19 14:02 TLATER

Agreed.

parkouss avatar Feb 24 '19 07:02 parkouss