[arch-general] Arch shutdown because of firefox

Thomas Bächler thomas at archlinux.org
Tue May 11 08:59:29 EDT 2010


Am 11.05.2010 14:56, schrieb Handsome Cheung:
> yes, I run hal, but don't use display manager. Your answer inspired
> me, and I will check something about hal immediately. Thanks!

Even if the user is allowed to use hal to initiate a shutdown, it would
still be necessary to exploit a security weakness in firefox that would
allow an attacker to execute arbitrary commands. And a matching exploit
would have to be on any website that triggers the shutdown ... this all
sounds very unlikely.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 262 bytes
Desc: OpenPGP digital signature
URL: <http://mailman.archlinux.org/pipermail/arch-general/attachments/20100511/8326b4ec/attachment.bin>


More information about the arch-general mailing list