Re: accountsservice: insufficient path check in user_change_icon_file_authorized_cb()

[Matthias Gerstner <mgerstner () suse de>]

> It might be a good idea to double-check that the result of
> g_file_get_path() starts with "/", doesn't contain "/../" and (just for
> completeness) doesn't end with "/..".

I tested the patch initially and and an isolated test case shows that it
does cover all these cases. No system calls appear to be performed.

Regards

Matthias

Attachment: signature.asc
Description: