https://bugs.kde.org/show_bug.cgi?id=400451

--- Comment #3 from Ardith Metz <itgvk...@grr.la> ---
(In reply to Martin Flöser from comment #2)
> This is unrelated to KWin - KWin does not care about any env directories. It
> belongs to startup which could be ksmserver.
Thx. I asked on IRC under which component should I open this and they
recommended Kwin as a roughly choice.

> Overall it's questionable whether we want to support env variable loading at
> all in Wayland as this is a security risk (at least KWin should not).
I'm not sure what do you mean here. Ignoring /etc/profile.d, .profile,
.pam_environment, .config/plasma-workspace/env? How do you setup working
session without exporting env variables? How do you set correct LANG, scale
dpi? Do you want to make wayland-session unconfigurable?

Is the user config part of security threat scenario in wayland but not in X?

In this specific case ignoring TMPDIR (which is changed from common shared dir
to private user dir) make security worse not better.

-- 
You are receiving this mail because:
You are watching all bug changes.

Reply via email to