Is FreePBX distro vulnerable to PolKit?

FreePBX Security
1

Just checking?

2

This was brought up previously at Polkit bug for Linux distros

2 Likes
3

# chmod 0755 /usr/bin/pkexec

[root@freepbx ~]# git clone [email protected]:jfrog/polkit-tools.git
[root@freepbx ~]# cd polkit-tools/
[root@freepbx polkit-tools]# cd pwnkit_detector/
[root@freepbx pwnkit_detector]# make
cc -Wall -fPIC -o pwnkit_detector pwnkit_detector.c
[root@freepbx pwnkit_detector]# ./test_pwnkit.sh
VULNERABLE

I have not run yum update which has the updated package

After yum update

[root@freepbx pwnkit_detector]# ./test_pwnkit.sh
NOT VULNERABLE - "pkexec" is patched
1 Like
4

My apologies to all!

I was surely behind the times and just my knee jerk reaction without a forum search.

Thanks! I had already changed my permissions but will update soon.

John

5

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.