Am 11.05.2010 14:56, schrieb Handsome Cheung:
> yes, I run hal, but don't use display manager. Your answer inspired
> me, and I will check something about hal immediately. Thanks!

Even if the user is allowed to use hal to initiate a shutdown, it would
still be necessary to exploit a security weakness in firefox that would
allow an attacker to execute arbitrary commands. And a matching exploit
would have to be on any website that triggers the shutdown ... this all
sounds very unlikely.

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to