Security issue: xfce pol kit allow others to sneak through

ToddAndMargo ToddAndMargo at zoho.com
Wed May 27 07:12:54 CEST 2020


On 2020-05-26 13:21, Chris Green wrote:
> ToddAndMargo <ToddAndMargo at zoho.com> wrote:
>> Hi All,
>>
>> Security issue
>>
>> Xfce 4.14
>> Fedora 32, x64
>>
>> There is a security issue where in if you are prompted
> 
> Did you mean "... issue wherein if ..." or something else?  It *is*
> important in this sort of context IMHO.
> 

No sure what the nuance is you are looking for..

If you start a program that triggers an xfce polkit
prompt for the root's password, after entering the password,
you can sneak other programs though that also trigger
the xfce polkit, if you are quick enough.


More information about the Xfce mailing list