Re: gsu (Was Re: More Political Stuff)

[Havoc Pennington <hp redhat com>]

Preben Randhol <randhol@pvv.org> writes:
> Havoc Pennington <hp@redhat.com> wrote on 27/08/2000 (08:31) :
> > There's no problem there, the GUI is not going to be suid.
> 
> I was thinking about that a bad theme could snatch the password as you
> typed it, but it has probably been fixed.
> 

No it hasn't, but I can't think of a way to fix it. The answer is
"don't run untrusted code as root", that includes both binaries and
themes. Plain command line "su" could also snatch the password.

Havoc