kio-admin in kdereview
    Albert Astals Cid 
    aacid at kde.org
       
    Thu Oct 13 21:32:31 BST 2022
    
    
  
El dijous, 13 d’octubre de 2022, a les 1:03:53 (CEST), Harald Sitter va 
escriure:
> On Thu, Oct 13, 2022 at 12:46 AM Albert Astals Cid <aacid at kde.org> wrote:
> > Did I misunderstood the code? It looks like this run all of kio with root
> > powers?
> 
> That is correct
That feels like a reasonably big no no with my security hat.
I'm relatively sure we have not audited all of KIO and it's dependencies to be 
"running as root"-safe.
What's the use case of this against the kauth support in file_unix.cpp ?
Cheers,
  Albert
    
    
More information about the kde-core-devel
mailing list