search

Poikilos / EnlivenMinetest

Minetest engine server management tools and ENLIVEN game installer/updater
Other
3 stars 0 forks source link

minetest_game mods and modpacks are owned by root #135

Open Poikilos opened 5 years ago

Poikilos commented 5 years ago

minetest_game mods and modpacks are owned by root in the end, for some reason. This may cause serious problems on your server. Change the owner to your current user.

slopsbucket commented 5 years ago

This is a serious Fedora issue, possibly Ubuntu as well but I don't know.

Simple experiment - change ownership of minetest.conf to root then change in game settings. Ownership is now set back to your user.

Other stand alone apps such as ClipGrab can also exploit this serious security issue. When I reported it at Bugzilla I got the same sort of useless response that I came to associate with the other minetest forums.

Denial and abdication of responsibility aren't helpful to users.