https://bugzilla.novell.com/show_bug.cgi?id=438338 Summary: [Novell:NTS/supportutils] /opt/supportconfig/plugins is not secure Product: openSUSE.org Version: unspecified Platform: Other OS/Version: Other Status: NEW Severity: Major Priority: P5 - None Component: 3rd party software AssignedTo: jrecord@novell.com ReportedBy: jrecord@novell.com QAContact: opensuse-communityscreening@forge.provo.novell.com Found By: Development supportconfig will run plugins from /opt/supportconfig/plugins (XPLUGIN_DIR) regardless of XPLUGIN_DIR mode. supportconfig should only run plugins if the XPLUGIN_DIR owner is root and has modes 700 or 500. The rest of the supportconfig should run, but when supportconfig plugins are going to run and error should be displayed and no plugins should be executed. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.