On Sat, 15 Dec 2012 17:27:02 +0100, bill.allomb...@math.u-bordeaux1.fr wrote:
> 

> There is still the possibility that it is a bug in GSmartControl.
> What kind of file is it writting ?

It writes its configuration in the user's ~/.config/gsmartcontrol with root 
permissions
before the patched su-to-root.
 
> Anyway, please find a patched su-to-root that cause su and sux to reset $HOME.
> 
> At the very least, I should be able to change sux to reset $HOME

The patched su-to-root fixes this bugreport. The X11 application starts 
successfully
as root and writes its configuration inside root's $HOME. This is true for both 
su and sux.

I don't know if you read my follow-up observation before, but prior to this 
patch,
the binaries/scripts that are only affected by the undesired behavior are those 
originating
from /usr/bin, such as /usr/bin/gsmartcontrol. Synaptics, for example, is not 
unaffected and
resides inside /usr/sbin.

> but it is not clear it is safe to do so for su.

I would like to know why is it not safe for su, just to stay informed of 
possible
security implications of this changed behavior.


Cheers,

ianp



--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to