Failure of sandboxing
Failure of sandboxing
Posted Apr 22, 2025 9:22 UTC (Tue) by epa (subscriber, #39769)In reply to: Failure of sandboxing by vonbrand
Parent article: Catanzaro: Dangerous arbitrary file read vulnerability in Yelp
I imagined that reading a file that's installed on the system (and readable to all local users) wouldn't require a prompt, but reading a file which is under the user's home directory would prompt, and doubly so if it's not world-readable.