Re: F15 Why does gnome-shell automatically start Adobe acroread updater? (malware?)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 07/11/2011 04:19 PM, Deron Meranda wrote:
> For some reason, my Gnome 3 shell process has forked off an 'acroread'
> process which I did not start!
>
> It appears to be attempting to install itself or do something in the
> background. This is completely unacceptable, nothing should ever
> attempt to download and run some unauthenticated script and should
> never attempt to install anything without my explicit knowledge and
> permission!
>
> I consider this to be a security breach and failure of the Fedora
> security policies to permit this. In fact there should be a separate
> SELinux context for this commercial app just so it can't do anything
> to my system without my knowledge.
>
> UID PID PPID C STIME TTY TIME CMD
> XXX 2509 2483 0 Jul10 ? 00:00:01 gnome-session
> XXX 2615 2509 1 Jul10 ? 00:12:04 /usr/bin/gnome-shell
> XXX 16717 2615 0 13:46 ? 00:00:08 acroread
> XXX 16769 16717 20 13:46 ? 00:29:25 /bin/sh
> /tmp/acrobat.n9vv0T/AdobeReader/INSTALL --lzma=/home/XXX
> XXX 7662 16769 0 15:40 ? 00:00:00 [INSTALL] <defunct>
>
> Does the Gnome shell have some sort of auto-start or auto-update
> capability in it, that perhaps Adobe has surreptitiously hooked itself
> into. And how do I get it back out?
>
>
> (The only reason I even have Adobe reader is because Evince can not
> fully handle the US IRS tax forms.)

Look in
/etc/xdg/autostart

or
in ~/.config/autostart
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAk4bY50ACgkQrlYvE4MpobMgCQCfZ4iPVFe+FYSFpuXxoz78jKwV
yo0AoKV2Ou2mznHDj1c2v9aBFlB7RZZU
=9caG
-----END PGP SIGNATURE-----
-- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines

• This message: [ Message body ]
• Next message: Deron Meranda: "Re: F15 error in Ruby gem caused by package rubygem-yard missing overwrite_accessor method"
• Previous message: Darryl L. Pierce: "Re: F15 Why does gnome-shell automatically start Adobe acroread updater? (malware?)"
• In reply to: Deron Meranda: "F15 Why does gnome-shell automatically start Adobe acroread updater? (malware?)"
• Next in thread: Ed Greshko: "Re: F15 Why does gnome-shell automatically start Adobe acroread updater? (malware?)"

• Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ]