Skip to content

Allow full paths to sockets on non-macOS

Demi Marie Obenour requested to merge DemiMarie/libxcb:allow-full-paths into master

When combined with libxtrans!7 (merged), this allows CVE-2020-25697 to be mitigated by placing the AF_UNIX socket in a secure directory on the filesystem.

This enables HAVE_LAUNCHD unconditionally and deletes the configure switch. It also drops abstract socket support. This MR is sufficient for xcb, but libxtrans!7 (merged) is needed for Xlib.

Signed-off-by: Demi Marie Obenour demiobenour@gmail.com

Edited by Demi Marie Obenour

Merge request reports