Comment 5 for bug 1902250

Revision history for this message
Ian Johnson (anonymouse67) wrote :

Hi Markus, please see my comment about your concerns about reading/moving the file as root in this comment: https://bugs.launchpad.net/snappy/+bug/1620771/comments/52.

TLDR for anyone else stumbling on this bug: the migrateXauthority function in cmd_run.go which copies this XAUTHORITY file is run as the user, not as root. The symlink checks may be unnecessarily over-restricting here (and indeed it seems so, as this bug is valid), but we do still follow proper security by trying to do the copy by the calling user and thus the kernel is mediating this copying.