Age | Commit message (Collapse) | Author | |
---|---|---|---|
2018-10-06 | Fix swaylock w/shadow on glibc, improve security | Drew DeVault | |
Today I learned that GNU flaunts the POSIX standard in yet another creative way. Additionally, this adds some security improvements, namely: - Zeroing out password buffers in the privileged child process - setuid/setgid after reading /etc/shadow | |||
2018-09-28 | Add support for building swaylock without PAM | Drew DeVault | |
This involves setuid'ing swaylock, which then forks and drops perms on the parent process. The child process remains root and listens on a pipe for requests to validate passwords against /etc/shadow. |