[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Closing a privilege escalation

From: Richard Stallman
Subject: Re: Closing a privilege escalation
Date: Wed, 25 Apr 2018 18:40:39 -0400

[[[ To any NSA and FBI agents reading my email: please consider    ]]]
[[[ whether defending the US Constitution against all enemies,     ]]]
[[[ foreign or domestic, requires you to follow Snowden's example. ]]]

  > > With some arguments, emacs started inside sudo will run the user's own
  > > .emacs file rather than root's.  This creates a known vulnerability
  > > for privilege escalation.

  > Is this about bug#28618?  I think this issue was discussed
  > comprehensively there.

The discussion reached the conclusion that the problem is real, even
with recent GNU/Linux systems.  We have not fixed it.

I'm proposing a solution that I think will be adequate.  Does
anyone have comments about this solution?

Dr Richard Stallman
President, Free Software Foundation (https://gnu.org, https://fsf.org)
Internet Hall-of-Famer (https://internethalloffame.org)
Skype: No way! See https://stallman.org/skype.html.

reply via email to

[Prev in Thread] Current Thread [Next in Thread]