Le vendredi 07 mai 2010 à 23:42 +0200, Bastian Blank a écrit : > On Fri, May 07, 2010 at 09:18:48PM +0200, Josselin Mouette wrote: > > Le vendredi 07 mai 2010 à 12:08 +0200, Bastian Blank a écrit : > > > gdm3 allows unauthenticated users to change the power configuration, > > > including automatic suspend. > > > This is a DoS on any non-singleuser machine. > > What do you mean by “unauthenticated users”? Do you mean it is possible > > to change that configuration from the login screen? > > Yes. The login screen allow access to gnome-power-manager properties. > See /usr/share/gdm/autostart/LoginWindow/gnome-power-manager.desktop.
The power manager daemon is launched, but that doesn’t give you access to the properties. Could you explain exactly how you would exploit that? Thanks, -- .''`. Josselin Mouette : :' : `. `' “If you behave this way because you are blackmailed by someone, `- […] I will see what I can do for you.” -- Jörg Schilling
signature.asc
Description: This is a digitally signed message part
