[Xfce-bugs] [Bug 12282] [PATCH] xflock4: Do not override PATH with hardcoded value.

bugzilla-daemon at xfce.org bugzilla-daemon at xfce.org
Fri Jan 29 10:16:06 CET 2016


https://bugzilla.xfce.org/show_bug.cgi?id=12282

Landry Breuil <landry at xfce.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |landry at xfce.org

--- Comment #1 from Landry Breuil <landry at xfce.org> ---
I think the original idea of setting PATH to a limited 'trusted' list of
subdirs was to avoid potential attackers/malwares to drop malicious
replacements for xlock/etc in user-writable directories potentially in the
user's PATH...

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the Xfce-bugs mailing list