Mailinglist Archive: opensuse-bugs (15873 mails)

< Previous Next >
[Bug 298943] missing XDG_SESSION_COOKIE in environment
  • From: bugzilla_noreply@xxxxxxxxxx
  • Date: Mon, 13 Aug 2007 02:31:24 -0600 (MDT)
  • Message-id: <20070813083124.95D7DCC789@xxxxxxxxxxxxxxxxxxxxxx>
https://bugzilla.novell.com/show_bug.cgi?id=298943#c17


Marcus Meissner <meissner@xxxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEEDINFO                    |REOPENED
      Info Provider|security-team@xxxxxxx       |




--- Comment #17 from Marcus Meissner <meissner@xxxxxxxxxx>  2007-08-13 02:31:23 MST ---
well, does a "su" or "sudo" and its programs in there belong to the same
ConsoleKit session or not? For auditing at least they do.

(I personally think they shouldnt for ConsoleKit.)

How does ConsoleKit and its design define it?

And I think that both su and sudo strip the environment already of all /
dangerous variables, so this could jsut be added.


-- 
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

< Previous Next >
References