Re: [Bug 1767618] Re: system Brightness & Lock app ignores file permissions

2018-05-03 Thread steve gooberman-hill
Seth, thanks for the explanation. You learn something every day. I've been hacking away for almost 40 years now, and I hadn't considered how unlink() could be used to bypass access permissions. You had me ROTFL with your thoughts on apprenticeships in information security. :-) Steve Steve

Re: [Bug 1767618] Re: system Brightness & Lock app ignores file permissions

2018-05-02 Thread Seth Arnold
On Wed, May 02, 2018 at 07:07:51AM -, steve gooberman-hill wrote: > I'm agreed that this is the way the system permissions work. But, did you > see the comment I added to the bug report? Hi Steve, indeed I did. > Further investigation shows that file ownership is also ignored > If I change

Re: [Bug 1767618] Re: system Brightness & Lock app ignores file permissions

2018-05-02 Thread steve gooberman-hill
Hi Seth, thanks for your mail. I'm agreed that this is the way the system permissions work. But, did you see the comment I added to the bug report? Further investigation shows that file ownership is also ignored If I change the ownership and permissions of the file, then they are ignored by the

[Bug 1767618] Re: system Brightness & Lock app ignores file permissions

2018-04-30 Thread Seth Arnold
This is the way Unix discretionary access controls work. So long as the files are in Eve's home directory, and she retains ownership of her home directory, she will be able to rename the ~/.config/ directory and continue on as she wishes. Furthermore, the screen locking is handled by a process

[Bug 1767618] Re: system Brightness & Lock app ignores file permissions

2018-04-30 Thread Seth Arnold
** Information type changed from Private Security to Public Security ** Changed in: gnome-screensaver (Ubuntu) Status: New => Won't Fix -- You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gnome-screensaver in Ubuntu.