[hpoj-devel] Re: Security hole in hplip

[Don <don...@hp...>]

Erwan David wrote:
> 	On my debian, the .hplip.conf file is created world
> writable. This allows a user A to change B user's printing or
> scanning commands, replacing them with arbitrary commands which will
> run with B's rights.This file should be created in 600 mode.
> 
> 

This will be addressed in version 0.8.8.

Thanks,

Don