Bug 93724 - Root access via xquartz ver 2.7.8
Summary: Root access via xquartz ver 2.7.8
Status: RESOLVED MOVED
Alias: None
Product: accountsservice
Classification: Unclassified
Component: general (show other bugs)
Version: unspecified
Hardware: x86-64 (AMD64) Mac OS X (All)
: medium critical
Assignee: Matthias Clasen
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-01-15 09:46 UTC by cam
Modified: 2018-08-07 09:33 UTC (History)
3 users (show)

See Also:
i915 platform:
i915 features:


Attachments

Description cam 2016-01-15 09:46:39 UTC
I am running Mac Os Yosemite, 10.10.5 and I can SU to the Administrator account from a standard account on my Mac from Xquartz 2.7.8. My standard account which is configured to "not allow user to administer the account" works for my standard Mac OS account. 

I consider this a security problem because the standard user account on the Mac cannot access the administrator account but Xquartz allows this to occur from within the Standard account.
Comment 1 GitLab Migration User 2018-08-07 09:33:48 UTC
-- GitLab Migration Automatic Message --

This bug has been migrated to freedesktop.org's GitLab instance and has been closed from further activity.

You can subscribe and participate further through the new bug through this link to our GitLab instance: https://gitlab.freedesktop.org/accountsservice/accountsservice/issues/44.


Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.