News for hackers. Stuff that matters.

A comment on X.org Security Advisory: multiple security issues X.Org X server and Xwayland. Parent comment

Re:X.org Security Advisory: multiple security issues X.Org X... by anthk on Monday November 03, 2025 @08:46AM (#45798879)
All of NIXen.

~/.profile

~/.env

~/.xprofile

Exploiting TMPDIR, /tmp race conditions, ~/.mailcap and mutt (I used that to get access to 'premium' binaries under restricted accounts).

If you have Emacs you can do tons of stuff from a single account.

And so on.

[ Parent | on HN ]
Re:X.org Security Advisory: multiple security issues X.Org X... by nurettin on Monday November 03, 2025 @01:23PM (#45802391)
Not sure what mutt has to do with X. Maybe you replied to the wrong thread.
[ Parent | on HN ]
Re:X.org Security Advisory: multiple security issues X.Org X... by 41throw-it on Monday November 03, 2025 @01:31PM (#45802505)
~/.xprofile

I agree in a little way to what you say, but if you can write .xprofile you can with no work escalate from the x socket.

[ Parent | on HN ]