Bug#580629: gdm3 - allows unauthenticated users to change power configuration

[Josselin Mouette]

Le samedi 12 juin 2010 à 13:20 +0200, Bastian Blank a écrit :
> On Sat, Jun 12, 2010 at 10:44:51AM +0200, Josselin Mouette wrote:
> > The power manager daemon is launched, but that doesn’t give you access
> > to the properties.
> > Could you explain exactly how you would exploit that?
> 
> Start a new greeter (available via several locations), modify the power
> management settings (suspend on lid close for example), close the lid.

Yes, but *how* do you modify those settings from the greeter?

-- 
 .''`.      Josselin Mouette
: :' :
`. `'  “If you behave this way because you are blackmailed by someone,
  `-    […] I will see what I can do for you.”  -- Jörg Schilling
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 190 bytes
Desc: This is a digitally signed message part
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnome-maintainers/attachments/20100612/8ae1caa4/attachment.pgp>