Re: Local users get to play root?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Once upon a time, Richard Hughes <hughsient@xxxxxxxxx> said:
> 2009/11/19 Chris Adams <cmadams@xxxxxxxxxx>:
> > So there are no packages in releases/12/Everything that have privilege
> > escalation bugs?  All I have to do is wait for one to be found, and I
> > have a signed path to root.  Even if the package is fixed in updates, I
> > just have to have a custom updates repo without it.
> 
> No, that won't work either. In PackageKit parlance "installing a
> package" is installing a package that does not already exist on the
> computer. You can't downgrade (or upgrade) packages using the
> PackageKit InstallPackages() method.

That only matters if you install every package in the repo, which I
don't think many people do.
-- 
Chris Adams <cmadams@xxxxxxxxxx>
Systems and Network Administrator - HiWAAY Internet Services
I don't speak for anybody but myself - that's enough trouble.

-- 
fedora-devel-list mailing list
fedora-devel-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-devel-list

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]
  Powered by Linux