Commit a545291e authored by Committed by Michael Biebl
polkit: Avoid race condition in scraping /proc
If a calling process execve()s a setuid program, it can appear to be uid 0. Since we're receiving requests over DBus, avoid this by simply passing system-bus-name as a subject.
Showing with 5 additions and 26 deletions