Am 11.05.2010 14:56, schrieb Handsome Cheung: > yes, I run hal, but don't use display manager. Your answer inspired > me, and I will check something about hal immediately. Thanks! Even if the user is allowed to use hal to initiate a shutdown, it would still be necessary to exploit a security weakness in firefox that would allow an attacker to execute arbitrary commands. And a matching exploit would have to be on any website that triggers the shutdown ... this all sounds very unlikely.
Attachment:
signature.asc
Description: OpenPGP digital signature
