From 3ff9ad2ebc41360bd34892e73db4bec6e07aee09 Mon Sep 17 00:00:00 2001 From: wxy Date: Mon, 29 Dec 2014 21:24:41 +0800 Subject: [PATCH] PUB:20141219 The 'grinch' isn't a Linux vulnerability, Red Hat says MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit @yupmoon 翻译的不错，我一字未易。 --- ...he 'grinch' isn't a Linux vulnerability, Red Hat says.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) rename {translated/news => published}/20141219 The 'grinch' isn't a Linux vulnerability, Red Hat says.md (96%) diff --git a/translated/news/20141219 The 'grinch' isn't a Linux vulnerability, Red Hat says.md b/published/20141219 The 'grinch' isn't a Linux vulnerability, Red Hat says.md similarity index 96% rename from translated/news/20141219 The 'grinch' isn't a Linux vulnerability, Red Hat says.md rename to published/20141219 The 'grinch' isn't a Linux vulnerability, Red Hat says.md index 1753bc7806..f129af6b61 100644 --- a/translated/news/20141219 The 'grinch' isn't a Linux vulnerability, Red Hat says.md +++ b/published/20141219 The 'grinch' isn't a Linux vulnerability, Red Hat says.md @@ -1,4 +1,4 @@ -红帽反驳：“grinch”算不上Linux漏洞 +红帽反驳：“grinch（鬼精灵）”算不上Linux漏洞 ================================================================================ ![](http://images.techhive.com/images/article/2014/12/grinch-linux-100536132-primary.idge.png) @@ -14,7 +14,7 @@ Alert Logic 称攻击者可以使用第三方Linux 软件框架Policy Kit (Polkit)达到利用“鬼精灵”漏洞的目的。Polkit旨在帮助用户安装与运行软件包，此开源程序由红帽维护。Alert Logic 声称，允许用户安装软件程序的过程中往往需要超级用户权限，如此一来，Polkit也在不经意间或通过其它形式为恶意程序的运行洞开方便之门。 -红帽对此不以为意，表示系统就是这么设计的，换句话说，“鬼精灵”不是臭虫而是一项特性。 +红帽对此不以为意，表示系统就是这么设计的，换句话说，**“鬼精灵”不是臭虫而是一项特性。** 安全监控公司Threat Stack联合创造人 Jen Andre [就此在一篇博客][4]中写道：“如果你任由用户通过使用那些利用了Policykit的软件，无需密码就可以在系统上安装任何软件，实际上也就绕过了Linux内在授权与访问控制。” @@ -52,7 +52,7 @@ via:http://www.computerworld.com/article/2861392/security0/the-grinch-isnt-a-lin 作者：[Joab Jackson][a] 译者：[yupmoon](https://github.com/yupmoon) -校对：[校对者ID](https://github.com/校对者ID) +校对：[wxy](https://github.com/wxy) 本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创翻译，[Linux中国](http://linux.cn/) 荣誉推出