*** This bug is a security vulnerability ***
You have been subscribed to a public security bug by Jamie Strandboge
(jdstrand):
Binary package hint: network-manager
Running
/etc/init.d/NetworkManager stop
as a normal non-root user succeeds allowing such user to stop
NetworkManager
whereas running
/etc/init.d/NetworkManager start
as a normal non-root user, without sudo, fails to run, warning you that
you have to be root to run the init script.
I would expect that no init script invocation should be allowed by a
non-root (or non-sudo) user.
[EMAIL PROTECTED]:~$ lsb_release -rd
Description: Ubuntu 8.10
Release: 8.10
network-manager:
Installeret: 0.7~~svn20081018t105859-0ubuntu1
Kandidat: 0.7~~svn20081018t105859-0ubuntu1
Versionstabel:
*** 0.7~~svn20081018t105859-0ubuntu1 0
500 http://dk.archive.ubuntu.com intrepid/main Packages
100 /var/lib/dpkg/status
** Affects: network-manager (Ubuntu)
Importance: Undecided
Status: New
** Tags: init networkmanager
--
The init-script for NetworkManager can be run by non-root
https://bugs.launchpad.net/bugs/291008
You received this bug notification because you are a member of Ubuntu Bugs,
which is a direct subscriber.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
