[Bug 634] New: jdk tests write to /etc/shadow

bugzilla-daemon at icedtea.classpath.org bugzilla-daemon at icedtea.classpath.org
Thu Feb 17 13:22:17 PST 2011


http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=634

           Summary: jdk tests write to /etc/shadow
           Product: IcedTea
           Version: 6-1.9.6
          Platform: all
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: IcedTea6
        AssignedTo: unassigned at icedtea.classpath.org
        ReportedBy: devurandom at gmx.net


I found two tests that operate potentially dangerously:
./openjdk-ecj/jdk/test/java/io/IOException/LastErrorString.java
./openjdk/jdk/test/java/io/IOException/LastErrorString.java

They both try to call java.io.FileOutputStream on /etc/shadow, which will
create a mess for someone trying to run the tests as root. Worst is that he
probably does not notice/expect it until it is too late and login is
impossible.


-- 
Configure bugmail: http://icedtea.classpath.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the distro-pkg-dev mailing list