Files
omarchy-pkgs/pkgbuilds
Basti b422d37fa2 Drop privileges when seeding Dell haptic config (#497)
The root-run package hook changed ownership of paths below a
user-controlled home directory. A config symlink could redirect chown to
an arbitrary root-owned file during installation or upgrade.

Run the config writer as the target desktop user and remove the privileged
ownership changes. This also prevents the missing-config path from writing
through a user-controlled pathname as root. Add regression coverage and
bump the package release.

Reported-by: piratemoo (Esther) <22439214+piratemoo@users.noreply.github.com>
Link: https://github.com/piratemoo/Arbitrary-File-Ownership-Change-via-Symlink-LPE
2026-09-18 15:24:41 +02:00
..
2026-09-15 01:26:53 +00:00
2026-09-15 01:26:53 +00:00
2026-09-16 11:50:57 +00:00
2026-09-15 01:26:53 +00:00
2026-09-16 11:50:57 +00:00
2026-09-15 01:26:53 +00:00
2026-09-04 23:40:49 -04:00
2026-09-10 20:59:14 +00:00
2026-09-03 16:33:12 +00:00
2026-09-07 14:36:02 -04:00
2026-09-15 01:26:53 +00:00
2026-09-16 11:50:57 +00:00
2026-08-04 10:42:32 -07:00
2026-08-07 03:03:18 -07:00
2026-09-15 17:07:20 -04:00
2026-05-08 01:04:51 -04:00
2026-09-15 17:07:20 -04:00
2026-05-08 01:04:50 -04:00
2026-08-15 18:06:52 -04:00
2026-08-07 04:29:12 -07:00
2026-09-13 20:57:39 +00:00
2026-09-14 21:55:41 +00:00
2026-09-15 17:10:15 +00:00
2026-09-04 12:29:12 +02:00
2026-09-16 11:50:57 +00:00
2026-09-15 17:10:15 +00:00
2026-09-17 13:35:33 -04:00
2026-09-06 20:32:10 +00:00
2026-08-07 22:55:45 -04:00
2026-08-17 00:20:45 -07:00
2026-05-08 01:07:21 -04:00