Comment 4 for bug 594857

Revision history for this message
Philipp Kern (pkern) wrote :

I think calling it a security vulnerability is too harsh, there hasn't been any exploit in Sobby until now. It's unnecessary, though. I'll take care of it in Debian by providing an init script that uses a system user for Sobby, with proper usage of session serialization too.