[Gambas-user] Security, how to check if a library is genuine?

[Brian G]

Also you can specify a library by the full path in your application
--
Thanks
Brian G Thursday, 19 August 2021, 03:54PM -07:00 from bb  adamnt42 at gmail.com :

>On Thu, 2021-08-19 at 12:29 -0700, Brian G wrote:
> Question if your library and application, have secure permissions,
> and the app knows where it and the lib  should be, 
> is it really a problem? 
> Could the system use and have configured app armour/SELinux or the
> likes?
>
> If some one could replace your library, then perhaps they have root
> permissions and could therefore replace any security based library
> down the line.... Or just take the info the app is accessing, or just
> give themselves the correct group permissions......
>
> Maybe I don't really understand the problem well.
>
> "Failure is the key to success; 
> each mistake teaches us something"  .. Morihei Ueshiba
> Brian G
>
>It's becuse of the search order for libraries - right there in number
>one place is ~.local/share/gambas3/lib/, so whatever the user wants to
>place in there is going to be used.
>
>b 
>
>
>----[  http://gambaswiki.org/wiki/doc/netiquette ]----
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.gambas-basic.org/pipermail/user/attachments/20210820/82ffe77a/attachment.htm>