From 3771c49a94806b317fe4de470e96ae589b660a1b Mon Sep 17 00:00:00 2001 From: Husam Harazi Date: Wed, 20 Dec 2023 14:56:15 +0300 Subject: [PATCH] filesystem: Set the sticky bit on `/tmp/hypr` (#4199) To prevent unprivileged users from deleting other users' files. --- src/Compositor.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/Compositor.cpp b/src/Compositor.cpp index cbdfa2881..ab478a87b 100644 --- a/src/Compositor.cpp +++ b/src/Compositor.cpp @@ -50,7 +50,7 @@ CCompositor::CCompositor() { if (!std::filesystem::exists("/tmp/hypr")) { std::filesystem::create_directory("/tmp/hypr"); - std::filesystem::permissions("/tmp/hypr", std::filesystem::perms::all, std::filesystem::perm_options::replace); + std::filesystem::permissions("/tmp/hypr", std::filesystem::perms::all | std::filesystem::perms::sticky_bit, std::filesystem::perm_options::replace); } const auto INSTANCEPATH = "/tmp/hypr/" + m_szInstanceSignature;