Flatpak: A security nightmare – two years later

Re:Flatpak: A security nightmare – two years later by rleigh on Friday October 02, 2020 @11:40AM (#24663744)

Running NSS and PAM modules in-process was IMO a historical mistake. Convenient in one aspect, rather inconvenient and impractical in many others.

If we were to redo these today, I think we'd do them out-of-process and talk to them over UNIX domain sockets or pipes.

The transitive dependencies of NSS and PAM modules can also wreak havoc with your application. There are many bugs which have arisen because of these limitations. Yes, looking at you, GnuTLS.

[ Parent | on HN ]

Re:Flatpak: A security nightmare – two years later by wahern on Friday October 02, 2020 @04:02PM (#24666494)

OpenBSD chose BSD Auth over PAM for this reason. With BSD Auth the C API invokes binaries in /usr/lib/auth which are SUID or SGID according to which permissions are required for the credential store.

[ Parent | on HN ]