On Sun, Apr 10, 2011 at 7:04 PM, Joel Rees <joel.r...@gmail.com> wrote:
> This is not to be mean to the other users. It's to protect the other
> users from the vulnerabilities in flash. If flash is installed
> globally (the usual thing that happens when you use the rpm package),
> all users become vulnerable. Including that administrator account that
> you never use to get on the web, except to fedoraproject.org and other
> places where you need to read the manuals, etc.

I don't think this is correct. Permissions for plugins are not setuid.
So as long as the call to load the library is done as a regular user
(as in, you don't surf the Internet as root), vulnerabilities in the
plugin can _only_ affect the regular user.

Please feel free to correct me if you think I am wrong.

-- 
Suvayu

Open source is the future. It sets us free.
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines

Reply via email to