How do I write security sensitive/SUID/SGID programs with GTK+? Is GTK+ secure? What's this GTK_MODULES security hole I heard about? [GTK 2.x]

GTK+ FAQ
<<< Previous | Development with GTK+: the begining | Next >>>

# How do I write security sensitive/SUID/SGID programs with GTK+? Is GTK+ secure? What's this GTK_MODULES security hole I heard about? [GTK 2.x]

The short answer to this question is: you can't, so don't write SUID/SGID programs with GTK+

GTK+ will refuse to run with elevated privileges, as it is not designed to be used in this manner. The only correct way to write a setuid program with a graphical user interface is to have a setuid backend that communicates with the non-setuid graphical user interface via a mechanism such as a pipe and that considers the input it receives to be untrusted.

For a more thorough explanation of the GTK+ Developers position on this issue see http://www.gtk.org/setuid.html.

<<< Previous | Home | Next >>>
How do I use the Glade GUI builder with GTK+? [GTK 2.x] | Up | I tried to compile a small Hello World of mine, but it failed. Any clue? [GTK 2.x]