I can't reproduce this myself but I am using the default shell (bash
provided by dash) and gnome-terminal. My understanding of the change to
policykit-1
https://git.launchpad.net/ubuntu/+source/policykit-1/commit/?h=applied/ubuntu
/bionic-devel&id=840c50182f5ab1ba28c1d20cce4c207364852935 is that
previously the UID was supplied by the caller and used without
validation - instead now policykit tries to validate the supplied UID
against the actual UID of the subject - however this could change over
time and is racy - so there are a bunch of failure modes which this
change to policykit introduces which would previously have worked.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1784964

Title:
  Regression due to CVE-2018-1116 (processes not inheriting user ID or
  groups )

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/policykit-1/+bug/1784964/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to