Comment 2 for bug 1318864

Revision history for this message
Sebastian Lackner (slackner) wrote : Re: [Bug 1318864] Re: Tries to install the plugins at login screen LMDE

I assume that the installation of plugins as a regular user works well, is
this right?

As Erich has already mentioned, even more critical than that the
installation fails with Pipelight, is the fact, that plugins are loaded
during the login screen. This could be used by a plugin to record for
example the entered password or to run a shell without having the user to
enter a password.

Did you already contact the Linux Mint team about this issue? If not we can
also do this for you.

2014-05-13 16:09 GMT+02:00 Erich E. Hoover <email address hidden>:

> I assume that you notice this because of the dialog that pops up
> informing you that the plugin is installing. That means that the login
> screen loads all the configured plugins. I would suggest that this is a
> serious security issue and that you should immediately contact the
> project that develops the login screen for Mint. This would likely
> allow a malicious plugin to see what you are doing at login.
>
> --
> You received this bug notification because you are subscribed to
> Pipelight.
> Matching subscriptions: pipelight
> https://bugs.launchpad.net/bugs/1318864
>
> Title:
> Tries to install the plugins at login screen LMDE
>
> Status in Pipelight:
> New
>
> Bug description:
> For some reason at every boot it tries to install all the plugins at
> the login screen on Linux Mint Debian Edition. I'm using the latest
> version of Mint, and latest pipelight and wine compholio from Debian
> wheezy repository
>
> http://download.opensuse.org/repositories/home:/DarkPlayer:/Pipelight/Debian_7.0/
> ./
>
> To manage notifications about this bug go to:
> https://bugs.launchpad.net/pipelight/+bug/1318864/+subscriptions
>