[Libreoffice-bugs] [Bug 122149] New: Libreoffice gives access to the same file with a different UID/GID in Servermode

bugzilla-daemon at bugs.documentfoundation.org bugzilla-daemon at bugs.documentfoundation.org
Mon Dec 17 06:23:52 UTC 2018


https://bugs.documentfoundation.org/show_bug.cgi?id=122149

            Bug ID: 122149
           Summary: Libreoffice gives access to the same file with a
                    different UID/GID in Servermode
           Product: LibreOffice
           Version: 5.2.7.2 release
          Hardware: x86-64 (AMD64)
                OS: Linux (All)
            Status: UNCONFIRMED
          Severity: normal
          Priority: medium
         Component: LibreOffice
          Assignee: libreoffice-bugs at lists.freedesktop.org
          Reporter: darkangelofworld at gmail.com

We have the following Problem in this Case:

User 1 created a File on a Server (via Servermode) and edited it.
User 2 (logged in via Servermode) opens this File, changes somethings and the
File has changed with the identity from User 1.

So it happens that there are some Changes, User1 doesn't know about. But the
File shows his name. And the Security of this whole Process is unclear, if User
2 is able to work in the Name from User 1.

It just happens if you are logged in, in Servermode that User 2 gets the
foreign UID/GID. 

Example:
>     -rw-rw-r-- 1 User1 User1         101  9. Okt 21:42
> .~lock.beta-testing-fixing-progress.doc#

But User1 didn't worked on this file on this day

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20181217/495d28cc/attachment.html>


More information about the Libreoffice-bugs mailing list