<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
On 02/22/2010 01:21 PM, Harshavardhana wrote:
<blockquote cite="mid:4B823764.5090203@gluster.com" type="cite">
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
On 02/22/2010 05:18 AM, Kunthar wrote:
<blockquote
cite="mid:9a09ca9a1002211548q6cd711e4y311864521d5178dc@mail.gmail.com"
type="cite">
<pre wrap="">Hi all,
Check attached snapshots.
I can right click and toggle fullscreen in firefox and can go anywhere.
It is risky.
Why don't you guys consider using python GUI?
Kunthar
</pre>
<pre wrap=""><fieldset class="mimeAttachmentHeader"></fieldset>
_______________________________________________
Gluster-devel mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated"
href="mailto:Gluster-devel@nongnu.org">Gluster-devel@nongnu.org</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://lists.nongnu.org/mailman/listinfo/gluster-devel">http://lists.nongnu.org/mailman/listinfo/gluster-devel</a>
</pre>
</blockquote>
Hi Kunthar,<br>
<br>
A bug has been filed upon your request. <br>
<br>
<a moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://bugs.gluster.com/cgi-bin/bugzilla3/show_bug.cgi?id=658">http://bugs.gluster.com/cgi-bin/bugzilla3/show_bug.cgi?id=658</a><br>
<br>
Regards<br>
<pre class="moz-signature" cols="72">--
Harshavardhana
<a moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://www.gluster.com">http://www.gluster.com</a></pre>
<pre wrap="">
<fieldset class="mimeAttachmentHeader"></fieldset>
_______________________________________________
Gluster-devel mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Gluster-devel@nongnu.org">Gluster-devel@nongnu.org</a>
<a class="moz-txt-link-freetext" href="http://lists.nongnu.org/mailman/listinfo/gluster-devel">http://lists.nongnu.org/mailman/listinfo/gluster-devel</a>
</pre>
</blockquote>
<br>
The subject you are referring here is not a security issue but a clear
cut case of disabling keys which will be done with the bug id . Also it
is agreeable that you should have not been allowed access to
terminal and closing full-screen window etc. which will be fixed. But
in essence all live cd's or installation cd's have "root" access. If
you have physical access to the box then its necessarily a sysadmins
prerogative to not do "rm -rf /*" unless the idea is not to use the
system. But if you see any root exploit or directory traversals from
"webui" through a remote machine which could be considered as a
security hole. <br>
<br>
Regards<br>
<pre class="moz-signature" cols="72">--
Harshavardhana
<a class="moz-txt-link-freetext" href="http://www.gluster.com">http://www.gluster.com</a></pre>
</body>
</html>