filter-graph: move the pipe plugin to separate .so

It's quite dangerous to allow it to be loaded dynamically into the
pulse server so block it. The other plugins should be safe to load.
This commit is contained in:
Wim Taymans 2026-05-07 14:37:44 +02:00
parent a4e2856d06
commit 85decefbef
4 changed files with 400 additions and 250 deletions

View file

@ -25,9 +25,7 @@ context.spa-libs = {
# because the pulse server allows dynamic loading of streams and modules
# inside the server, we must be careful with the filter-graph. Only allow
# LADSPA filters.
filter.graph.plugin.ladspa = filter-graph/libspa-filter-graph-plugin-ladspa
filter.graph.plugin.* = blocked
filter.graph = filter-graph/libspa-filter-graph
filter.graph.plugin.pipe = blocked
}
context.modules = [