[Pkg-virtualbox-devel] Bug#585951: virtualbox-ose: should not be set suid

Michael Gilbert michael.s.gilbert at gmail.com
Tue Jun 15 05:38:02 UTC 2010


package: virtualbox-ose
severity: important
tags: security

the following virtualbox binaries have the suid bit set.  this is a poor
practice from a security perspective. 

/usr/lib/virtualbox/VBoxNetAdpCtl
/usr/lib/virtualbox/VBoxNetDHCP
/usr/lib/virtualbox/VirtualBox
/usr/lib/virtualbox/VBoxSDL
/usr/lib/virtualbox/VBoxHeadless

thanks,
mike





More information about the Pkg-virtualbox-devel mailing list