-
Notifications
You must be signed in to change notification settings - Fork 15
Open
Description
As of now, lind can execute a cwasm file living anywhere on the hosts filesystem, without regarding its relationship to lind_root. This can cause problems with consistency as seen here, possible security problems, or just lack of a general philosophy .
The simple fixes are just to change the lind-clang script to mv any executable to lind-root, or a relative path from there, and change lind-wasm to only execute things starting from lind-root.
We probably want to consider adding checks at runtime to only accept files with proper paths as well.
Metadata
Metadata
Assignees
Labels
No labels