Mark DRM lease protocol privileged

Allowing sandboxed clients to request DRM leases has security
implications.
This commit is contained in:
Simon Ser 2024-01-04 15:01:26 +01:00 committed by Simon Zeni
parent 7e69a7076f
commit c5fd8c050f

View file

@ -77,6 +77,17 @@ static void handle_drm_lease_request(struct wl_listener *listener, void *data) {
#endif #endif
static bool is_privileged(const struct wl_global *global) { static bool is_privileged(const struct wl_global *global) {
#if WLR_HAS_DRM_BACKEND
if (server.drm_lease_manager != NULL) {
struct wlr_drm_lease_device_v1 *drm_lease_dev;
wl_list_for_each(drm_lease_dev, &server.drm_lease_manager->devices, link) {
if (drm_lease_dev->global == global) {
return true;
}
}
}
#endif
return return
global == server.output_manager_v1->global || global == server.output_manager_v1->global ||
global == server.output_power_manager_v1->global || global == server.output_power_manager_v1->global ||