diff options
| author | Mitchell Hashimoto <m@mitchellh.com> | 2025-09-19 16:12:30 -0700 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2025-09-19 16:12:30 -0700 |
| commit | f6e4a2888afc4a5a49446ed0f859287a0523a82d (patch) | |
| tree | cbc579a33e7fcf616dcd3ac7e7a2e4117b2917ad /build.zig.zon.nix | |
| parent | 944f206b76c092b88ded08ab17311d1711b7589b (diff) | |
| parent | 270891eee182a48b8e2e1bc4dcf94a65790760f5 (diff) | |
Snap: Do not leak snap variables or snap paths into children (#8771)
Avoid leaking snap environment values and in particular the `$SNAP*`
values to the children that we run from the terminal.
Do this programmatically instead of the launcher, since ghostty needs
know the environment it runs in, while it must not leak the info to the
children.
We've also another leak on snap, that creates a more visible problem
(wrong matching of children applications) that is the apparmor security
profile.
I've handled it at
https://github.com/3v1n0/ghostty/commit/cc3b46f6001aa9539508a1e82ebb85a588c6c4f2
but that requires some love in order to fully decouple the snap option
to the build, to avoid including it in non-snap builds, so an help would
be appreciated there.
> This PR was contains code (in `filterSnapPaths`) that was improved by
DeepSeek.
Diffstat (limited to 'build.zig.zon.nix')
0 files changed, 0 insertions, 0 deletions
