On Fri, Aug 7, 2015 at 4:34 PM, Rainer Müller <[email protected]> wrote:
> I mean, most users already run the port command as root. Any security > vulnerability that can be exploited in the GUI would most probably also be > exploitable from the command line when running with 'sudo port'. Or what > kind of > vulnerability do you have in mind? > GUIs have a lot of moving parts and correspondingly higher attack surface, including potential control of all other GUI applications; something run in a terminal can't easily exploit the window system (especially with environment sanitization so $XAUTHORITY and $WINDOWID etc. aren't visible from X11 terminals, etc.). This is why many Linux/X11 programs issue warnings if they discover they are running as root (see for example wireshark). -- brandon s allbery kf8nh sine nomine associates [email protected] [email protected] unix, openafs, kerberos, infrastructure, xmonad http://sinenomine.net
_______________________________________________ macports-dev mailing list [email protected] https://lists.macosforge.org/mailman/listinfo/macports-dev
