14.04: Minicom only usable as root
Bug #1379288 reported by
sgofferj
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| minicom (Ubuntu) |
New
|
Undecided
|
Unassigned | ||
Bug Description
I just recently switched from Opensuse to Ubuntu. On Opensuse, minicom by default reads and writes it's configs to $HOME/.
Hence minicom on Ubuntu is only usable as root or via sudo. That is a completely unneccessary risk as every user who wants to use minicom must be at least able to sudo which opens the way to potential local privilege escalations if there's a bug in minicom.
Given the popularity of embedded systems like Arduino, Raspberry Pi, etc. I would classify this issue as significant.
| affects: | linux (Ubuntu) → minicom (Ubuntu) |
Revision history for this message
| Seth Arnold (seth-arnold) wrote Bug is not a security issue | #1 |
| information type: | Private Security → Public |
To post a comment you must log in.
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privilege boundaries nor directly cause loss of data/privacy. Please feel free to report any other bugs you may find.