[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: Local users get to play root?



2009/11/19 Chris Adams <cmadams hiwaay net>:
> So there are no packages in releases/12/Everything that have privilege
> escalation bugs?  All I have to do is wait for one to be found, and I
> have a signed path to root.  Even if the package is fixed in updates, I
> just have to have a custom updates repo without it.

No, that won't work either. In PackageKit parlance "installing a
package" is installing a package that does not already exist on the
computer. You can't downgrade (or upgrade) packages using the
PackageKit InstallPackages() method.

Richard.


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]