desktop-packages team mailing list archive

Thread
Date

[Bug 882862] [NEW] Guest account can read/write in /media/

To: desktop-packages@xxxxxxxxxxxxxxxxxxx
From: Launchpad Bug Tracker <882862@xxxxxxxxxxxxxxxxxx>
Date: Fri, 28 Oct 2011 17:14:19 -0000
Reply-to: Bug 882862 <882862@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

*** This bug is a security vulnerability ***

You have been subscribed to a public security bug:

The guest account can everything under /media/.
Is the guest account really supposed to be able to access and read all the files on the host computer?

If yes, then is the guest account really really supposed to be able to write to /media/ ?
Shouldn't the guest be limited to his temporary home in /tmp/ ?

** Affects: lightdm (Ubuntu)
     Importance: Undecided
         Status: Incomplete


** Tags: filesystem guest media security
-- 
Guest account can read/write in /media/
https://bugs.launchpad.net/bugs/882862
You received this bug notification because you are a member of Desktop Packages, which is subscribed to lightdm in Ubuntu.