Package: flightgear Version: 3.0.0-5 Severity: important Tags: confirmed Hi,
as discovered by Adam D. Barratt, FlightGear's script language Nasal could better sandbox the scripts executed: * write access to /tmp/*.xml is likely unneeded, see the upstream discussion, here: http://sourceforge.net/p/flightgear/mailman/message/33619992/ * symlinks are followed, which allows breaking out of the permitted directories with a proper symlink. This mostly serves as a reminder and tracking bug for myself. Regards Markus Wanner
signature.asc
Description: OpenPGP digital signature
