LTSP LDM through 2.18.06 allows fat-client root access because the LDM_USERNAME variable may have an empty value if the users shell lacks support for Bourne shell syntax. This is related to a run-x-session script.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Debian_linux | Debian | 8.0 (including) | 8.0 (including) |
Debian_linux | Debian | 9.0 (including) | 9.0 (including) |
Debian_linux | Debian | 10.0 (including) | 10.0 (including) |
Ldm | Ubuntu | bionic | * |
Ldm | Ubuntu | disco | * |
Ldm | Ubuntu | eoan | * |
Ldm | Ubuntu | focal | * |
Ldm | Ubuntu | groovy | * |
Ldm | Ubuntu | trusty | * |
Ldm | Ubuntu | xenial | * |