Re: root password prompts

2010-05-27 Thread Patrick O'Callaghan
On Thu, 2010-05-27 at 02:27 -0500, Mike McCarty wrote: > The fellow I responded to is contributing to a thread which > concerns precise differences between how different tools > handle security. He already wrote one inaccurate statement, > from which I infer that he is not writing very clearly, and

Re: root password prompts

2010-05-27 Thread Patrick O'Callaghan
On Thu, 2010-05-27 at 01:17 -0500, Mike McCarty wrote: > > No, I mean sudo. In the default config it prompts for the user's > > password. > > But the OP asked about "root password", not the user's password. And I replied in order to help him with his underlying need, which is not to know the root

Re: root password prompts

2010-05-27 Thread Tim Waugh
On Wed, 2010-05-26 at 14:39 -0400, Tom Horsley wrote: > Today I was running system-config-printer to install all > the various printers around here at work on a freshly > installed fedora 13 system running as a brand new user > in a standard gnome session. As with other PolicyKit-enabled applicati

Re: root password prompts

2010-05-27 Thread Rahul Sundaram
On 05/27/2010 03:30 PM, Andrew Parker wrote: > I disagree. Nit picking details in this industry is essential for > progress and understanding. Defending flawed terminology that imply > security holes when they don't exist is foolish. I would like to > thank Mike for his explanations, I for one h

Re: root password prompts

2010-05-27 Thread Andrew Parker
On Thu, May 27, 2010 at 5:19 AM, Rahul Sundaram wrote: > On 05/27/2010 02:42 PM, Mike McCarty wrote: >> I'm aware of that information. >> >> Well, it seems that I was not clear enough in my statement. >> > > There is no lack of clarity.   When people refer to sudo remembering > passwords, they are

Re: root password prompts

2010-05-27 Thread Mike McCarty
Mike McCarty wrote: [...] > $ sudo ls -l /var/run/sudo/jmccarty > total 8 > -rw--- 1 root root 0 May 14 12:47 13 > -rw--- 1 root root 0 Apr 23 03:23 18 > -rw--- 1 root root 0 May 21 16:03 24 > -rw--- 1 root root 0 May 26 15:07 33 > -rw--- 1 root root 0 May 27 02:55 3

Re: root password prompts

2010-05-27 Thread Rahul Sundaram
On 05/27/2010 02:42 PM, Mike McCarty wrote: > I'm aware of that information. > > Well, it seems that I was not clear enough in my statement. > There is no lack of clarity. When people refer to sudo remembering passwords, they are certainly referring to the functionality and not the implementa

Re: root password prompts

2010-05-27 Thread Mike McCarty
Rahul Sundaram wrote: I'd appreciate it if you wouldn't CC me. > On 05/27/2010 12:57 PM, Mike McCarty wrote: >> All programs which prompt for, and receive, passwords in clear >> text form go to extra lengths to make sure that they do NOT >> "remember" passwords in any form >> > > Mike, > >

Re: root password prompts

2010-05-27 Thread Rahul Sundaram
On 05/27/2010 12:57 PM, Mike McCarty wrote: > All programs which prompt for, and receive, passwords in clear > text form go to extra lengths to make sure that they do NOT > "remember" passwords in any form > Mike, Refer to the notes on password caching at http://www.wlug.org.nz/SudoHowto Th

Re: root password prompts

2010-05-27 Thread Rahul Sundaram
On 05/27/2010 12:09 AM, Tom Horsley wrote: > I have seen claims on this list that the root password is > remembered for a small amount of time so you don't keep > getting asked. That has never worked for me, but I assumed > it was just because I was running a non-standard session > and was missing

Re: root password prompts

2010-05-27 Thread Mike McCarty
Rahul Sundaram wrote: > On 05/27/2010 11:47 AM, Mike McCarty wrote: >> Patrick O'Callaghan wrote: >> >>> IOW it remembers it by logging it. How else would it do it except by >>> recording it in a file? >>> >> I'm not interested in argumentation. It does not remember passwords, >> period. >>

Re: root password prompts

2010-05-27 Thread Rahul Sundaram
On 05/27/2010 11:47 AM, Mike McCarty wrote: > Patrick O'Callaghan wrote: > >> IOW it remembers it by logging it. How else would it do it except by >> recording it in a file? >> > I'm not interested in argumentation. It does not remember passwords, > period. > I am not sure how you can d

Re: root password prompts

2010-05-26 Thread Mike McCarty
Patrick O'Callaghan wrote: > On Wed, 2010-05-26 at 14:48 -0500, Mike McCarty wrote: >>> AFAIK this is a function of 'sudo'. It asks you the first time and >>> remembers for a few minutes after. I've never seen this behaviour >> other >>> than with sudo. >> Umm, perhaps you mean su. The sudo command

Re: root password prompts

2010-05-26 Thread Suvayu Ali
On Wednesday 26 May 2010 10:41 PM, Suvayu Ali wrote: > On Wednesday 26 May 2010 05:56 PM, Tom H wrote: >> On Wed, May 26, 2010 at 6:17 PM, Suvayu >> Ali wrote: >>> I believe what the OP is asking is the gui utility that remembers the >>> authentication after a user enters the root password after th

Re: root password prompts

2010-05-26 Thread Suvayu Ali
On Wednesday 26 May 2010 05:56 PM, Tom H wrote: > On Wed, May 26, 2010 at 6:17 PM, Suvayu Ali > wrote: >> I believe what the OP is asking is the gui utility that remembers the >> authentication after a user enters the root password after the prompt by >> a gui dialogue. > > You're right. I was be

Re: root password prompts

2010-05-26 Thread Tom H
rious printers around here at work on a freshly >>> installed fedora 13 system running as a brand new user >>> in a standard gnome session. >>> >>> I get three or four root password prompts for each >>> separate printer install. >>> >>>

Re: root password prompts

2010-05-26 Thread Genes MailLists
On 05/26/2010 06:17 PM, Suvayu Ali wrote: > In short you are better off configuring sudo and calling > system-config-printer from the terminal like this, > > $ sudo system-config-printer > Sort of begs the question why the GUI does not use sudo ... let the gui do what it does best .. goo-eee .

Re: root password prompts

2010-05-26 Thread Tom Horsley
On Wed, 26 May 2010 15:17:41 -0700 Suvayu Ali wrote: > In short you are better off configuring sudo and calling > system-config-printer from the terminal like this, > > $ sudo system-config-printer Yes, running this stuff as root usually works (except for the brief period of time where the code

Re: root password prompts

2010-05-26 Thread Suvayu Ali
s a brand new user >> in a standard gnome session. >> >> I get three or four root password prompts for each >> separate printer install. >> >> Where is this mythical setting to make it >> remember the password? > > I have never seen &qu

Re: root password prompts

2010-05-26 Thread Patrick O'Callaghan
On Wed, 2010-05-26 at 16:59 -0400, Genes MailLists wrote: > >> and makes a new entry. > > > > IOW it remembers it by logging it. How else would it do it except by > > recording it in a file? > > > > poc > > > > It is an suid program - it doesn't need a password unless the policy > chooses to

Re: root password prompts

2010-05-26 Thread Tom H
ard session > and was missing something. > > Today I was running system-config-printer to install all > the various printers around here at work on a freshly > installed fedora 13 system running as a brand new user > in a standard gnome session. > > I get three or four root pas

Re: root password prompts

2010-05-26 Thread Genes MailLists
>> and makes a new entry. > > IOW it remembers it by logging it. How else would it do it except by > recording it in a file? > > poc > It is an suid program - it doesn't need a password unless the policy chooses to ask for one. -- users mailing list users@lists.fedoraproject.org To unsubscri

Re: root password prompts

2010-05-26 Thread Patrick O'Callaghan
On Wed, 2010-05-26 at 14:48 -0500, Mike McCarty wrote: > > AFAIK this is a function of 'sudo'. It asks you the first time and > > remembers for a few minutes after. I've never seen this behaviour > other > > than with sudo. > > Umm, perhaps you mean su. The sudo command does not prompt > for the r

Re: root password prompts

2010-05-26 Thread Mike McCarty
Mike McCarty wrote: > Patrick O'Callaghan wrote: >> On Wed, 2010-05-26 at 14:39 -0400, Tom Horsley wrote: > > [...] > >>> Where is this mythical setting to make it >>> remember the password? >> AFAIK this is a function of 'sudo'. It asks you the first time and >> remembers for a few minutes after

Re: root password prompts

2010-05-26 Thread Mike McCarty
Patrick O'Callaghan wrote: > On Wed, 2010-05-26 at 14:39 -0400, Tom Horsley wrote: [...] >> Where is this mythical setting to make it >> remember the password? > > AFAIK this is a function of 'sudo'. It asks you the first time and > remembers for a few minutes after. I've never seen this behavio

Re: root password prompts

2010-05-26 Thread Patrick O'Callaghan
ard session > and was missing something. > > Today I was running system-config-printer to install all > the various printers around here at work on a freshly > installed fedora 13 system running as a brand new user > in a standard gnome session. > > I get three or four

root password prompts

2010-05-26 Thread Tom Horsley
onfig-printer to install all the various printers around here at work on a freshly installed fedora 13 system running as a brand new user in a standard gnome session. I get three or four root password prompts for each separate printer install. Where is this mythical setting to make it remember the pas