Security issue with guake --execute-command
Open
Epic: GTK 3 port
Priority: High
Type: Defect
- Dominant language
- Python
- Stars
- 4.7k
- Forks
- 604
- PR merge metrics
- No merged PRs in 30d
Description
If you run inside guake a root shell or a shell on a remote server, any other program can run anything there. For security reasons `--execute-command` should be allowed only if shell in selected tab is not running any other programs, like ssh or sudo.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.