convince

Commit Graph

Author	SHA1	Message	Date
emersion	3a310f92ab	Replace _XOPEN_SOURCE with _POSIX_C_SOURCE And make sure we don't define both in the same source file.	6 years ago
Drew DeVault	c89e00a97e	Fix swaylock w/shadow on glibc, improve security Today I learned that GNU flaunts the POSIX standard in yet another creative way. Additionally, this adds some security improvements, namely: - Zeroing out password buffers in the privileged child process - setuid/setgid after reading /etc/shadow	6 years ago
Drew DeVault	c977349120	Add support for building swaylock without PAM This involves setuid'ing swaylock, which then forks and drops perms on the parent process. The child process remains root and listens on a pipe for requests to validate passwords against /etc/shadow.	6 years ago

Author

SHA1

Message

Date

emersion

3a310f92ab

Replace _XOPEN_SOURCE with _POSIX_C_SOURCE

And make sure we don't define both in the same source file.

Drew DeVault

c89e00a97e

Fix swaylock w/shadow on glibc, improve security

Today I learned that GNU flaunts the POSIX standard in yet another
creative way. Additionally, this adds some security improvements,
namely:

- Zeroing out password buffers in the privileged child process
- setuid/setgid after reading /etc/shadow

Drew DeVault

c977349120

Add support for building swaylock without PAM

This involves setuid'ing swaylock, which then forks and drops perms on
the parent process. The child process remains root and listens on a pipe
for requests to validate passwords against /etc/shadow.

3 Commits (9bf1b7a029afe2fdb07cb2bfe35cca4ad76098f9)