Date: Tue, 22 Feb 2011 15:54:11 -0500 (EST) From: Josh Bressers <bressers@...hat.com> To: oss-security@...ts.openwall.com Subject: Re: gdm PostLogin script executes scripts as user gdm ----- Original Message ----- > Hello oss-security, > > should we consider this as a vulnerability? > https://bugzilla.gnome.org/show_bug.cgi?id=602403 > I'm not sure this is a security flaw. It's not running user controlled scripts (at least not by default). In order for it to run a user controlled script, the admin would have to modify the Default script. Is this normal? I'm not all that familiar with expected use of gdm, perhaps someone who knows more can chime in? Thanks. -- JB
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.