[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 22 Feb 2011 15:54:11 -0500 (EST)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Subject: Re: gdm PostLogin script executes scripts as user
gdm
----- Original Message -----
> Hello oss-security,
>
> should we consider this as a vulnerability?
> https://bugzilla.gnome.org/show_bug.cgi?id=602403
>
I'm not sure this is a security flaw. It's not running user controlled
scripts (at least not by default). In order for it to run a user controlled
script, the admin would have to modify the Default script. Is this normal?
I'm not all that familiar with expected use of gdm, perhaps someone who
knows more can chime in?
Thanks.
--
JB
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
