Security issue
Tofloor
poster avatar
ronilsonbarcellos
deepin
2020-05-28 14:33
Author
Edited by ronilsonbarcellos at 2020-5-27 19:55

Guys, I found a flaw that allows a user to access another user's area without using sudo. When we create a new user, the directory at /home for this new user has the permission 755, everyone can access your file whith this permission. It's easily corrective by a chmod 700 /home/

The second flaw is very serious, whem I configure a connection using the OPENVPN on network configuration tab, your VPN will be accessible for another user, I tryed solve it, but I'm not able to do it.

Has someone faced it too? I'm use Deepin 15.11.

Reply Favorite View the author
All Replies
神末shenmo
deepin
Spark-App
2020-05-28 16:20
#1
https://bbs.deepin.org/user/48640 Seems like he's right
Reply View the author
deepin-mq
deepin
2020-05-28 16:58
#2
Thank you for your feedback. The questions are recorded first.
Reply View the author