Wrong owner - Security gap!!

Jean28518 / linux-assistant

A daily linux helper with powerful integrated search, routines checks and administrative tasks. The Project is built with flutter and python.

https://www.linux-assistant.org

GNU General Public License v3.0

94 stars 12 forks source link

Wrong owner - Security gap!! #185

Closed Palace4Software closed 7 months ago

Palace4Software commented 7 months ago

The owner of the files in "/usr/lib/rechnungs-assistant" (and all other inclueded files) is the user, who installed the .deb -package. This is an massive security gap!

The owner should be the root-user.

Jean28518 commented 7 months ago

Thank you very much for observing thats an issue to solve, I will have a detailed look at your PR:)

Jean28518 commented 7 months ago

Fixed in https://github.com/Jean28518/linux-assistant/commit/374f4eefd86d1e9813fb9519523fe4d744cd4932 Thanks for reporting!