https://bugs.kde.org/show_bug.cgi?id=417227
Fabian Vogt <fab...@ritter-vogt.de> changed:
What |Removed |Added
----------------------------------------------------------------------------
Product|frameworks-kglobalaccel |kwin
Component|general |general
Assignee|kdelibs-b...@kde.org |kwin-bugs-n...@kde.org
Ever confirmed|0 |1
Status|REPORTED |CONFIRMED
CC| |fab...@ritter-vogt.de
Version|unspecified |git master
--- Comment #13 from Fabian Vogt <fab...@ritter-vogt.de> ---
[15:45] <fvogt> Just remove CAP_SYS_NICE and it'll work
[15:45] <PureTryOut[m]> And how would I do that?
[15:47] <fvogt> setcap /usr/bin/kwin_wayland cap_sys_nice=
[15:48] <fvogt> Actually, just setcap -r /usr/bin/kwin_wayland
[15:49] <PureTryOut[m]> You're right, that fixed it! :tadad
[15:54] <fvogt> kwin_wayland's CAP_SYS_NICE makes _dbus_check_setuid trigger
and so it ignores environment variables
[15:57] <fvogt> It works on glibc because it only checks the suid/euid
[15:57] <fvogt> On musl, issetugid is available and that doesn't like
capabilities
Ideally, kwin gets rid of its CAP_SYS_NICE. It's effectively a backdoor anyway.
--
You are receiving this mail because:
You are watching all bug changes.
