Re: [DNG] Security problem

2019-10-19 Thread tom
On Mon, 14 Oct 2019 07:07:18 +0200 "J. Fahrner via Dng" wrote: > Am 2019-10-14 01:01, schrieb tom: > > Why in gods name does a centralized instant messenger require root > > privileges on your machine? > > Signal uses the electron framework for running in a sandbox. Electron > uses the Linux

Re: [DNG] Security problem

2019-10-13 Thread J. Fahrner via Dng
Am 2019-10-14 01:01, schrieb tom: Why in gods name does a centralized instant messenger require root privileges on your machine? Signal uses the electron framework for running in a sandbox. Electron uses the Linux user namespaces feature for building the sandbox, but this seems to be

Re: [DNG] Security problem

2019-10-13 Thread tom
On Mon, 30 Sep 2019 19:46:28 +0200 Gonzalo Pérez de Olaguer Córdoba wrote: > Hi, Jochen. > > El Mon, 30 Sep 2019 19:29:34 +0200 > "J. Fahrner via Dng" escribió: > > > I just came across a security problem. The application > > signal-desktop could not be started anymore because a file from the

Re: [DNG] Security problem

2019-09-30 Thread Gonzalo Pérez de Olaguer Córdoba
Hi, Jochen. El Mon, 30 Sep 2019 19:29:34 +0200 "J. Fahrner via Dng" escribió: > I just came across a security problem. The application signal-desktop > could not be started anymore because a file from the electron framework > did not set a setuid bit >

[DNG] Security problem

2019-09-30 Thread J. Fahrner via Dng
I just came across a security problem. The application signal-desktop could not be started anymore because a file from the electron framework did not set a setuid bit (https://github.com/signalapp/Signal-Desktop/issues/3536). For the sandbox feature this obviously needs root privileges. It