*** This bug is a security vulnerability ***
Public security bug reported:
I am running ubuntu hardy with all the latest updates.
In a terminal, I typed the commands:
cd /etc/pulse
cp daemon.conf ~/Desktop
No sudo
This resulted in the pulseaudio config file standing on my desktop, it's
owner changed from "root" to me! I am not sure if this is a bug or not,
but it doesn't look very good to me. Same goes for /etc/X11/xorg.conf
(offcourse the original, can't be changed or deleted without sudo, but
still, this doesn't feel good to me)
** Affects: ubuntu
Importance: Undecided
Status: Invalid
** Visibility changed to: Public
--
All text files (didn't test others) in root filesystem can be copied to a
folder owned by the user, and then edited there, without needing sudo
https://bugs.launchpad.net/bugs/259814
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs