Date: Mon, 19 Jul 2004 03:31:47 GMT From: Ara Avvali <ara@avvali.com> To: freebsd-gnats-submit@FreeBSD.org Subject: i386/69264: security, regular user able to browse root home folder Message-ID: <200407190331.i6J3Vl8H015958@www.freebsd.org> Resent-Message-ID: <200407190340.i6J3eO3P050819@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 69264
>Category: i386
>Synopsis: security, regular user able to browse root home folder
>Confidential: no
>Severity: critical
>Priority: high
>Responsible: freebsd-i386
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Mon Jul 19 03:40:24 GMT 2004
>Closed-Date:
>Last-Modified:
>Originator: Ara Avvali
>Release: 4-10
>Organization:
Personal
>Environment:
%uname -a
FreeBSD FreeBSD.local 4.10-RELEASE FreeBSD 4.10-RELEASE #0: Tue May 25 22:47:12 GMT 2004 root@perseus.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC i386
%
>Description:
hi
i just noticed something crazy that i have to mention to you guys
when i login as regular user to gnome, it gives me the ability to browse through root's home folder and desktop, although i am a regular user
i don't think this is some thing normal and have to let you guys know
Thank you
>How-To-Repeat:
>Fix:
>Release-Note:
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200407190331.i6J3Vl8H015958>