[Bug 634] New: jdk tests write to /etc/shadow
bugzilla-daemon at icedtea.classpath.org
bugzilla-daemon at icedtea.classpath.org
Thu Feb 17 13:22:17 PST 2011
http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=634
Summary: jdk tests write to /etc/shadow
Product: IcedTea
Version: 6-1.9.6
Platform: all
OS/Version: Linux
Status: NEW
Severity: normal
Priority: P2
Component: IcedTea6
AssignedTo: unassigned at icedtea.classpath.org
ReportedBy: devurandom at gmx.net
I found two tests that operate potentially dangerously:
./openjdk-ecj/jdk/test/java/io/IOException/LastErrorString.java
./openjdk/jdk/test/java/io/IOException/LastErrorString.java
They both try to call java.io.FileOutputStream on /etc/shadow, which will
create a mess for someone trying to run the tests as root. Worst is that he
probably does not notice/expect it until it is too late and login is
impossible.
--
Configure bugmail: http://icedtea.classpath.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
More information about the distro-pkg-dev
mailing list