[Bugs] #2410 Sugar LOW: privilege escalation: allows caller to store anything sugar-datastore has access to

Sugar Labs Bugs bugtracker-noreply at sugarlabs.org
Thu Aug 1 04:13:02 EDT 2013


#2410: privilege escalation: allows caller to store anything sugar-datastore has
access to
---------------------------+-------------------------------------
  Reporter:  sascha_silbe  |            Owner:  alsroot
      Type:  defect        |           Status:  closed
  Priority:  Low           |        Milestone:  0.92
 Component:  Sugar         |          Version:  Git as of bugdate
  Severity:  Critical      |       Resolution:  wontfix
  Keywords:                |  Distribution/OS:
Bug Status:  New           |
---------------------------+-------------------------------------
\
\
\
\
Changes (by dnarvaez):

 * status:  new => closed
 * resolution:   => wontfix

\
\
\

Comment:

 With rainbow not even used anymore these days I don't think this is a
 priority. We should either enforce this kind of security or not enforce
 it, doing it only in a few places it's just a waste of resources.
\
\
\

--
Ticket URL: <http://bugs.sugarlabs.org/ticket/2410#comment:2>
Sugar Labs <http://sugarlabs.org/>
Sugar Labs bug tracking system


More information about the Bugs mailing list