[arch-general] Arch shutdown because of firefox
thomas at archlinux.org
Tue May 11 08:59:29 EDT 2010
Am 11.05.2010 14:56, schrieb Handsome Cheung:
> yes, I run hal, but don't use display manager. Your answer inspired
> me, and I will check something about hal immediately. Thanks!
Even if the user is allowed to use hal to initiate a shutdown, it would
still be necessary to exploit a security weakness in firefox that would
allow an attacker to execute arbitrary commands. And a matching exploit
would have to be on any website that triggers the shutdown ... this all
sounds very unlikely.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 262 bytes
Desc: OpenPGP digital signature
More information about the arch-general