#215: Pulse + su + autospawn = root perms on /tmp/pulse-$USER
--------------------+-------------------------------------------------------
Reporter: coling | Owner: lennart
Type: defect | Status: new
Priority: normal | Milestone:
Component: daemon | Severity: normal
Keywords: |
--------------------+-------------------------------------------------------
This is a report inspired by [http://qa.mandriva.com/show_bug.cgi?id=36643
a Mandriva bug report] that I have now replicated myself.
To replicate:
1. As a regular user start pulseaudio normally (e.g. pulseaudio -vvv).
2. su (do not su -)
3. Edit /etc/pulse/client.conf and ensure {{{autospawn = no}}}
4. Check perms on /tmp/pulse-$USER (ls -ld /tmp/pulse-$USER)
5. paplay filename.wav (pick something ;))
6. Check perms on /tmp/pulse-$USER (ls -ld /tmp/pulse-$USER)
7. It should at this stage still be owned by $USER
8. Edit /etc/pulse/client.conf and ensure {{{autospawn = yes}}}
9. paplay filename.wav
10. Check perms on /tmp/pulse-$USER (ls -ld /tmp/pulse-$USER)
11. The above check should reveal user and group ownership of root.
Ooops. $USER can no longer play sound :(
--
Ticket URL: <http://www.pulseaudio.org/ticket/215>
PulseAudio <http://pulseaudio.org/>
The PulseAudio Sound Server
_______________________________________________
pulseaudio-tickets mailing list
pulseaudio-tickets@mail.0pointer.de
https://tango.0pointer.de/mailman/listinfo/pulseaudio-tickets
