Re: set-uid root /usr/lib/nspluginwrapper/plugin-config

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, 2008-04-14 at 16:01 -0400, Chuck Anderson wrote:
> On Mon, Apr 14, 2008 at 03:57:56PM -0400, Jesse Keating wrote:
> > On Mon, 2008-04-14 at 15:46 -0400, Chuck Anderson wrote:
> > > Why is this program set-uid root?
> > > 
> > > ls -l /usr/lib/nspluginwrapper/plugin-config  
> > > -rwsr-xr-x 1 root root 60048 2008-03-11
> > > 10:02 /usr/lib/nspluginwrapper/plugin-config*
> > > 
> > > https://bugzilla.redhat.com/show_bug.cgi?id=442065
> > 
> > Probably so that it can create files in /usr/lib/mozilla when a user
> > downloads a plugin via their browser.
> 
> That just seems wrong.  If a user can download a plugin, it should be 
> put in ~/.mozilla/plugins.  A user shouldn't be able to force a plugin 
> into a system-wide directory.

I didn't say it was right, just what I thought was happening.

-- 
Jesse Keating
Fedora -- All my bits are free, are yours?

Attachment: signature.asc
Description: This is a digitally signed message part

-- 
fedora-devel-list mailing list
fedora-devel-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-devel-list

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]
  Powered by Linux