e5a27cffb1
In order to increase the security we disable ptrace on kwin_wayland. This makes it impossible for a another process running as the same user to attach to kwin_wayland to install a key logger. It doesn't protect against higher privileged users, but that's no problem: they can just read the input device file and don't need to attach to KWin to become a key logger. This change is highly inspired by a similar change to kscreenlocker. A difference is that KWin checks whether we are running under a debugger. In such a case we still want to allow ptrace.
31 lines
1 KiB
CMake
31 lines
1 KiB
CMake
#cmakedefine KWIN_BUILD_DECORATIONS 1
|
|
#cmakedefine KWIN_BUILD_TABBOX 1
|
|
#cmakedefine KWIN_BUILD_ACTIVITIES 1
|
|
#define KWIN_NAME "${KWIN_NAME}"
|
|
#define KWIN_INTERNAL_NAME_X11 "${KWIN_INTERNAL_NAME_X11}"
|
|
#define KWIN_CONFIG "${KWIN_NAME}rc"
|
|
#define KWIN_VERSION_STRING "${PROJECT_VERSION}"
|
|
#define XCB_VERSION_STRING "${XCB_VERSION}"
|
|
#define KWIN_KILLER_BIN "${CMAKE_INSTALL_FULL_LIBEXECDIR}/kwin_killer_helper"
|
|
#define KWIN_RULES_DIALOG_BIN "${CMAKE_INSTALL_FULL_LIBEXECDIR}/kwin_rules_dialog"
|
|
#cmakedefine01 HAVE_INPUT
|
|
#cmakedefine01 HAVE_X11_XCB
|
|
#cmakedefine01 HAVE_DRM
|
|
#cmakedefine01 HAVE_GBM
|
|
#cmakedefine01 HAVE_LIBHYBRIS
|
|
#cmakedefine01 HAVE_WAYLAND_EGL
|
|
#cmakedefine01 HAVE_SYS_PRCTL_H
|
|
#cmakedefine01 HAVE_PR_SET_DUMPABLE
|
|
|
|
/* Define to 1 if you have the <unistd.h> header file. */
|
|
#cmakedefine HAVE_UNISTD_H 1
|
|
|
|
/* Define to 1 if you have the <malloc.h> header file. */
|
|
#cmakedefine HAVE_MALLOC_H 1
|
|
|
|
#cmakedefine XCB_ICCCM_FOUND 1
|
|
#ifndef XCB_ICCCM_FOUND
|
|
#define XCB_ICCCM_WM_STATE_WITHDRAWN 0
|
|
#define XCB_ICCCM_WM_STATE_NORMAL 1
|
|
#define XCB_ICCCM_WM_STATE_ICONIC 3
|
|
#endif
|