File 0002-Disable-greeters-from-loading-KDE-s-debug-... of Package sddm

Overview Repositories Revisions Requests Users Attributes Meta

File 0002-Disable-greeters-from-loading-KDE-s-debug-hander.patch of Package sddm (Revision 31118292d97ca0c7b928a2793a6809d4)

Currently displaying revision 31118292d97ca0c7b928a2793a6809d4 , Show latest

From 505226cae81a97d15a665c87accf042bf17a223d Mon Sep 17 00:00:00 2001
From: David Edmundson <kde@davidedmundson.co.uk>
Date: Wed, 14 Oct 2015 00:08:59 +0100
Subject: [PATCH 2/2] Disable greeters from loading KDE's debug hander

Some themes may use KDE components which will automatically load KDE's
crash handler.

If the greeter were to then somehow crash, that would leave a crash
handler allowing other actions, albeit as the locked down SDDM user.

Only SDDM users using the breeze theme from plasma-workspace are
affected. Safest and simplest fix is to handle this inside SDDM
disabling kcrash via an environment variable for all future themes that
may use these libraries.

CVE-2015-0856

(cherry picked from commit 4cfed6b0a625593fb43876f04badc4dd99799d86)
---
 src/daemon/Greeter.cpp | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/daemon/Greeter.cpp b/src/daemon/Greeter.cpp
index 32f4a40a1a2f55fcb08aa9dfe563bf39e0c2a633..57307cbc7f19c4bdd951ed02329bc186ace119ad 100644
--- a/src/daemon/Greeter.cpp
+++ b/src/daemon/Greeter.cpp
@@ -141,6 +141,10 @@ namespace SDDM {
             env.insert(QStringLiteral("XDG_VTNR"), QString::number(m_display->terminalId()));
             env.insert(QStringLiteral("XDG_SESSION_CLASS"), QStringLiteral("greeter"));
             env.insert(QStringLiteral("XDG_SESSION_TYPE"), m_display->sessionType());
+
+            //some themes may use KDE components and that will automatically load KDE's crash handler which we don't want
+            //counterintuitively setting this env disables that handler
+            env.insert(QStringLiteral("KDE_DEBUG"), QStringLiteral("1"));
             m_auth->insertEnvironment(env);
 
             // log message
-- 
2.6.0

Places

File 0002-Disable-greeters-from-loading-KDE-s-debug-hander.patch of Package sddm (Revision 31118292d97ca0c7b928a2793a6809d4)

Places