<html> <head> <base href="https://bugs.freedesktop.org/"> </head> <body> <div> <a class="bz_bug_link bz_status_NEW " title="NEW - Add an API for taking screenshots and recording screencasts" href="https://bugs.freedesktop.org/show_bug.cgi?id=98894#c3">Comment # 3</a> on <a class="bz_bug_link bz_status_NEW " title="NEW - Add an API for taking screenshots and recording screencasts" href="https://bugs.freedesktop.org/show_bug.cgi?id=98894">bug 98894</a> from <a class="email" href="mailto:james@jamesh.id.au" title="James Henstridge <james@jamesh.id.au>"> James Henstridge</a> <pre>> Afaik, applications can't lie about /proc/[pid]/exe and the compositor could > use .desktop files from /usr/share/applications for identification (with both > name and icon). It is pretty easy to spoof the result of readlink() on /proc/[pid]/exe though. With user and mount namespaces, a regular user could bind mount a different executable over a trusted one before executing it. This could be detected by comparing stat() information, but that would also give false positives when upgrading a running application. There's not an obvious generic solution.</pre> </div> <hr> You are receiving this mail because: <ul> <li>You are the assignee for the bug.</li> </ul> </body> </html>