2 ms·
Only way to completely fix buggy user land is to error on any attempt to execute a program. Before this polkit had an authentication bypass last year, trusted u
by josefx 5y ago
Only way to completely fix buggy user land is to error on any attempt to execute a program. Before this polkit had an authentication bypass last year, trusted user supplied ids around 2018^1, ... . The list goes on.
^1 which ironically enough was an attempt to avoid racy uid checks on setuid binaries.
https://gitlab.freedesktop.org/polkit/polkit/-/commits/master https://gitlab.freedesktop.org/polkit/polkit/-/commits/maste...