New issue
Advanced search Search tips

Issue 888759 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner: ----
Closed: Sep 24
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security: Download apps through linux beta when extensions and add-ons are blocked

Reported by djlxlr1...@gmail.com, Sep 24

Issue description

This template is ONLY for reporting security bugs. If you are reporting a
Download Protection Bypass bug, please use the "Security - Download
Protection" template. For all other reports, please use a different
template.

Please READ THIS FAQ before filing a bug: https://chromium.googlesource.com
/chromium/src/+/master/docs/security/faq.md

Please see the following link for instructions on filing security bugs:
https://www.chromium.org/Home/chromium-security/reporting-security-bugs

NOTE: Security bugs are normally made public once a fix has been widely
deployed.

VULNERABILITY DETAILS
Please provide a brief explanation of the security issue.

VERSION
Chrome Version: 70.0.3538.22 + beta
Operating System: Chrome OS Samsung chromebook plus

REPRODUCTION CASE
I have discovered a bug that allows to bypass 3rd party and google monitoring. This especially goes for school run chromebooks which is what I have tested it on and also tested on my personal chromebook signed into my school gsuite that has heavy admin control. I was able to do this by setting up linux beta and downloading firefox with command "sudo apt-get install firefox-esr." This allowed me to bypass 3rd party software goguardian which is meant to block and monitor websites and videos. This allows software to be downloaded even though extensions and add-ons are blocked in gsuite by the school.
 
Project Member

Comment 2 by sheriffbot@chromium.org, Jan 1

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment