Basti b422d37fa2 Drop privileges when seeding Dell haptic config (#497) ...

The root-run package hook changed ownership of paths below a
user-controlled home directory. A config symlink could redirect chown to
an arbitrary root-owned file during installation or upgrade.

Run the config writer as the target desktop user and remove the privileged
ownership changes. This also prevents the missing-config path from writing
through a user-controlled pathname as root. Add regression coverage and
bump the package release.

Reported-by: piratemoo (Esther) <22439214+piratemoo@users.noreply.github.com>
Link: https://github.com/piratemoo/Arbitrary-File-Ownership-Change-via-Symlink-LPE

2026-09-18 15:24:41 +02:00

..

sync-rebuilds.yml

Bump unless every trigger is recorded and matches

2026-08-20 04:28:15 -07:00

sync-upstream.yml

Replace scheduled AUR imports with direct upstream watches

2026-09-14 21:15:17 -04:00

test.yml

Drop privileges when seeding Dell haptic config (#497)

2026-09-18 15:24:41 +02:00