On Tue, 2009-02-24 at 11:38 -0700, Michal Jaegermann wrote: > On Tue, Feb 24, 2009 at 10:48:12AM -0430, Patrick O'Callaghan wrote: > > On Mon, 2009-02-23 at 15:25 -0700, Michal Jaegermann wrote: > > > [...]> The KDE > > > > clock applet doesn't allow you to change the time (just the timezone) > > > > > > If that is a global change, and not how time is displayed on this > > > specific desktop, that this is bad enough. > > > > It isn't. It affects the displayed time on the desktop. The system's > > view of the timezone does not change. > > Yes, I was quite sure this only this could and should happen if you > will switch timezone in clockapplet (a very poor cousin of that > would a modification only for a time displayed by _that_ clock). I > was quite surprised when I found out that /etc/localtime changed. Once again, under KDE it doesn't. I now understand your point, that PK is wrong and should be fixed. What confused me is that you started this whole thread without saying that the vulnerability manifests through Gnome. > > AFAIK you can only change the system timezone via the root password. > > Not quite if you can start on your system a Gnome desktop session > and you have 'gnome-panel' package installed. That provides > /usr/libexec/clock-applet. Log out from a KDE session, change a > session type, login into a Gnome desktop, proceed like above ... See above. poc -- fedora-test-list mailing list fedora-test-list@xxxxxxxxxx To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-test-list
