Make consolehelper more liske sudo?

Matthew Miller mattdm at mattdm.org
Thu Mar 3 21:12:34 UTC 2005


On Thu, Mar 03, 2005 at 04:02:57PM -0500, Havoc Pennington wrote:
> One problem is that if you can run a GTK app as root (anything
> equivalent to setgid) then you can probably hack that app and do bad
> stuff, http://gtk.org/setuid.html
> So it's probably a requirement in all cases that we split out a backend
> that runs as root and have the UI separate.

Yes, sounds very sane.

Plus, as long as we're using SELinux, that could definitely help here.


-- 
Matthew Miller           mattdm at mattdm.org        <http://www.mattdm.org/>
Boston University Linux      ------>                <http://linux.bu.edu/>




More information about the Fedora-desktop-list mailing list