[Gambas-user] Security, how to check if a library is genuine?
brian at westwoodsvcs.com
Fri Aug 20 01:43:35 CEST 2021
App armor or selinux can restrict the access of the app to only system directories
Brian G Thursday, 19 August 2021, 03:54PM -07:00 from bb adamnt42 at gmail.com :
>On Thu, 2021-08-19 at 12:29 -0700, Brian G wrote:
> Question if your library and application, have secure permissions,
> and the app knows where it and the lib should be,
> is it really a problem?
> Could the system use and have configured app armour/SELinux or the
> If some one could replace your library, then perhaps they have root
> permissions and could therefore replace any security based library
> down the line.... Or just take the info the app is accessing, or just
> give themselves the correct group permissions......
> Maybe I don't really understand the problem well.
> "Failure is the key to success;
> each mistake teaches us something" .. Morihei Ueshiba
> Brian G
>It's becuse of the search order for libraries - right there in number
>one place is ~.local/share/gambas3/lib/, so whatever the user wants to
>place in there is going to be used.
>----[ http://gambaswiki.org/wiki/doc/netiquette ]----
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the User