https://qa.mandrakesoft.com/show_bug.cgi?id=1724

           Product: sudo
         Component: sudo
           Summary: mcc starts without root password
           Version: 1.6.6-2mdk
          Platform: Other
        OS/Version: All
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
        AssignedTo: [EMAIL PROTECTED]
        ReportedBy: [EMAIL PROTECTED]


I run mcc on a remote machine for package update. These are the commands I run:  
  
1. ssh <remote-machine> -l <non-root-username>  
  
2. After login, I run "mcc" from commandline  
  
3. It asks for root passwd. So far so good  
  
4. mcc starts up after root passwd is given. I quit mcc.  
  
5. Run "mcc" from commandline again. This time it starts without asking for root 
passwd. 
  
6. I quit mcc, logout of the remote machine.  
  
7. Immediately, repeat steps 1 and 2. Mcc starts without asking for root passwd !!  
 
Sudo default configuration is to accept to run commands that need elevetated 
privilegied rights in the 5 minutes that follow a password success on the root login. 
But should sudo continue to do so even after the remote ssh connection of the non-root 
user 
has ended ?



------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

Reply via email to