*** This bug is a security vulnerability ***
You have been subscribed to a public security bug by Marc Deslauriers
(mdeslaur):
When submitting a bug report from update-manager (I'm updating to ubuntu
12.04) the browser process is run as root. Would it not be safer to run
the browser as the logged in user?
This can also lead to all kinds of trouble with browsers which are not
properly configured.
Just accessing launchpad can probably be considered safe, but a normal
user might also be curious and start googling for an answer to his/her
problem. That might lead them anywhere on the Internet with a browser
running as root.
** Affects: update-manager (Ubuntu)
Importance: Undecided
Status: Incomplete
** Tags: dist-upgrade
--
bug report from update-manager run as root
https://bugs.launchpad.net/bugs/991530
You received this bug notification because you are a member of Ubuntu Bugs,
which is subscribed to the bug report.
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
