[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
bug#47584: Race condition in ‘copy-account-skeletons’: possible privileg
|
From: |
Maxime Devos |
|
Subject: |
bug#47584: Race condition in ‘copy-account-skeletons’: possible privilege escalation. |
|
Date: |
Sat, 03 Apr 2021 18:32:54 +0200 |
|
User-agent: |
Evolution 3.34.2 |
On Sat, 2021-04-03 at 18:22 +0200, Maxime Devos wrote:
> + ;; It is important 'chown' is called after
> 'copy-account-skeletons'
> + ;; Otherwise, a malicious user with good timing could
> + ;; create a symlink in HOME that would be dereferenced by
> + ;; 'copy-account-skeletons'.
Oops please add a period after 'copy-account-skeletons';