<html>
<head>
<base href="https://bugs.freedesktop.org/" />
</head>
<body>
<p>
<div>
<b><a class="bz_bug_link
bz_status_NEW "
title="NEW --- - Improve the "set log target" functionality"
href="https://bugs.freedesktop.org/show_bug.cgi?id=58389#c1">Comment # 1</a>
on <a class="bz_bug_link
bz_status_NEW "
title="NEW --- - Improve the "set log target" functionality"
href="https://bugs.freedesktop.org/show_bug.cgi?id=58389">bug 58389</a>
from <span class="vcard"><a class="email" href="mailto:tanuk@iki.fi" title="Tanu Kaskinen <tanuk@iki.fi>"> <span class="fn">Tanu Kaskinen</span></a>
</span></b>
<pre>A note about security: setting a new target, especially a file target, should
probably be prohibited by default in all other cases except when running in the
per-user mode and the client is running under the same user as the server. This
is not currently a problem, because pacmd doesn't work remotely nor in the
system mode, but if the functionality is added to pactl too, it makes it
possible for anyone who has access the pulseaudio server to write (and
overwrite) files anywhere where the pulseaudio process has write access.</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the QA Contact for the bug.</li>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>