Re: PackageKit policy: background and plans

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, Nov 20, 2009 at 09:38:43AM -0500, Fulko Hew wrote:

>    I do!  And I tell everyone else too, so they learn/understand the
>    difference
>    between 'god' and a 'mere mortal user' (ie. root and anyone else).

Actually, thinking about it, even this isn't sufficient. An attacker 
could change the ctrl+alt+F* bindings and use them to pop up a 
full-screen window that looks like the console. So you'd also need to 
set up securetty to ensure that root can only log in on real consoles. 
I really don't see this being a security issue in the common single-user 
case.

-- 
Matthew Garrett | mjg59@xxxxxxxxxxxxx

-- 
fedora-devel-list mailing list
fedora-devel-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-devel-list

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]
  Powered by Linux