[Webkit-unassigned] [Bug 245843] New: [GLib] D-Bus proxy quietly fails if host session bus address is an abstract socket

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=245843

            Bug ID: 245843
           Summary: [GLib] D-Bus proxy quietly fails if host session bus
                    address is an abstract socket
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebKitGTK
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: mcatanzaro at gnome.org
                CC: bugs-noreply at webkitgtk.org
            Blocks: 206533

Moving this from https://gitlab.gnome.org/GNOME/epiphany/-/issues/1852. Currently we have xdg-dbus-proxy create its client socket at the exact same location in the sandbox where the host session bus socket exists on the host system, so we don't have to mess with the DBUS_SESSION_BUS_ADDRESS environment variable. Problem is, if the host session bus address is an abstract socket, XDGDBusProxy::makePath simply fails.

We will change dbus-daemon to not default to using abstract sockets anymore in https://gitlab.freedesktop.org/dbus/dbus/-/issues/416, but WebKit should support this anyway. Using an abstract socket for the host session bus creates a big sandbox escape if combined with host network access, but WebKit's web process usually does not have network access (unless using a non-local X server).


Referenced Bugs:

https://bugs.webkit.org/show_bug.cgi?id=206533
[Bug 206533] [WPE][GTK] Tracker for bubblewrap sandbox issues
-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20220929/4de3f14f/attachment.htm>