Flash for F-15 -

Roberto Ragusa mail at robertoragusa.it
Thu Aug 11 09:07:11 UTC 2011


On 08/01/2011 07:43 AM, Pete Travis wrote:
> Just out of curiosity, are there any security/vulnerability issues presented by a root owned flash library?

The important part is the user which runs the library, not the owner of the file.
Almost all the files in /usr/bin or /usr/lib are root owned (that is, root placed
them there), but they are run by generic users.

You are probably referring to the alternative installation method of
copying the library in the plugins directory of the browser in the user home dir.
That would be a user-only installation, while the first one is a system-wide
installation. No security issue (unless, for example, you would like to avoid
having flash present in the browser of the root user).

-- 
   Roberto Ragusa    mail at robertoragusa.it


More information about the users mailing list