Red Hat Bugzilla – Bug 216836
Pup runs Firefox as root when clicking links in "Update Details" pane
Last modified: 2007-11-30 17:11:49 EST
Description of problem:
When using pup to update the system, clicking links in the "Update Details" pane
launches Firefox to show the link (expected) but Firefox is run by root
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. Run package updater
2. Select a package and open the "Update Details" pane
3. Click a link and then check and see who is running Firefox when it opens.
Firefox run by root.
Firefox run by user who ran pup.
Obvious potential security hole.
*** This bug has been marked as a duplicate of 216552 ***