Package: pepperflashplugin-nonfree
Version: 1.5
Severity: minor

Dear Maintainer,

I got this bug report in Ubuntu: http://pad.lv/1311936

-  -  -  -  -  -  -  -  -  -  -  -  -  -  -  -  -  -  -  -
script /usr/sbin/update-pepperflashplugin-nonfree line 33 reads:
[ `whoami` = "root" ] || die_hard "must be root"
This is the wrong way to check for root permission.
It should read something like:
[ `id -u` = '0' ] || die_hard "must be root"

For security reasons, my root user account is not named "root". Almost all
programs check for user id 0 but every now and then someone manages to get
it wrong.
In this case, i cannot properly update package pepperflashplugin-nonfree
except by hacking at the script.
-  -  -  -  -  -  -  -  -  -  -  -  -  -  -  -  -  -  -  -

I think it applies to Debian as well, so you may want to update
the check.

Thanks in advance,

--
Dmitry Shachnev

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to