https://bugs.kde.org/show_bug.cgi?id=452532

pallaswept <pallasw...@proton.me> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |pallasw...@proton.me

--- Comment #20 from pallaswept <pallasw...@proton.me> ---
This is also breaking kdesu and thus YaST, on OpenSuSE.

I discovered this when trying to run Yast software management, I'd get a
bouncing icon and then nothing.

Running the program from the CLI returns the following:

> /usr/lib/YaST2/bin/sw_single_wrapper
Don't need password!!

kf.su: [ /home/abuild/rpmbuild/BUILD/kdesu-5.108.0/src/stubprocess.cpp : 215 ] 
Unknown request: "ok"

I have run 
kwriteconfig5 --file kdesurc --group super-user-command --key
super-user-command sudo 
so that kdesu will use sudo rather than su, so that sudoers will be respected
by KDE.
KDE frameworks got an update around the same time as this change rolled out, so
the natural thought was that kdesu was broken, but it turns out to be this
option.

Running 
echo 'Defaults !use_pty' | sudo tee -a /etc/sudoers 
and then repeating the above instantly fixes it:

> /usr/lib/YaST2/bin/sw_single_wrapper
Don't need password!!

and the GUI appears and works as intended.

This option has been enabled for security reasons and accordingly kdesu needs
to be updated to handle the new default behaviour securely, rather than a
workaround that amounts to disabling the security measure.

-- 
You are receiving this mail because:
You are watching all bug changes.

Reply via email to