Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

privilege escalation #4327

Closed
SergeyMy opened this issue May 10, 2023 · 1 comment
Closed

privilege escalation #4327

SergeyMy opened this issue May 10, 2023 · 1 comment
Labels
wontfix This will not be worked on

Comments

@SergeyMy
Copy link
Contributor

SergeyMy commented May 10, 2023 •
edited

Bug Description

changing settings without privileges.
(linux desktop)

How to Reproduce

  1. service started as root
  2. run rustdesk from anywhere other than /usr
    bingo we change the service settings without any rights!.

Expected Behavior

The application client should never be able to change server settings!

Operating system(s) on local side and remote side

linux EL8 (RL8)

RustDesk Version(s) on local side and remote side

1.2.0+ local: nightly as of today

Screenshots

n/a

Additional Context

#4273
@SergeyMy SergeyMy added the bug Something isn't working label May 10, 2023
@rustdesk rustdesk added wontfix This will not be worked on and removed bug Something isn't working labels May 11, 2023
Repository owner locked as resolved and limited conversation to collaborators May 11, 2023
@rustdesk
Copy link
Owner

rustdesk commented May 11, 2023 •
edited

submit a pr with better solution if u do not like this simple /usr check which is ok for normal users with standard installation.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
wontfix This will not be worked on
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@rustdesk @SergeyMy