*** This bug is a security vulnerability ***

Public security bug reported:

I am running ubuntu hardy with all the latest updates.

In a terminal, I typed the commands:

cd /etc/pulse

cp daemon.conf ~/Desktop

No sudo

This resulted in the pulseaudio config file standing on my desktop, it's
owner changed from "root" to me! I am not sure if this is a bug or not,
but it doesn't look very good to me. Same goes for /etc/X11/xorg.conf
(offcourse the original, can't be changed or deleted without sudo, but
still, this doesn't feel good to me)

** Affects: ubuntu
     Importance: Undecided
         Status: Invalid

** Visibility changed to: Public

-- 
All text files (didn't test others) in root filesystem can be copied to a 
folder owned by the user, and then edited there, without needing sudo
https://bugs.launchpad.net/bugs/259814
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to