[EMAIL PROTECTED]:~# locate funnnnnt &
[1] 8841
[EMAIL PROTECTED]:~# exit
exit
[EMAIL PROTECTED]:~$ sudo  su
[EMAIL PROTECTED]:/home/edc# 

I don't feel comfortable logging out of terminals only to find a person
can gain root access by using the same terminal. I know I should log out
the user also, but that is not always possible for a desktop computer,
if a person were to run Firefox from that terminal he could get
exploited via a javascript which simply runs su? I'm sure it is more
technical than that, but this seems like a very serious bug to me.

-- 
sudo does not prompt for password
https://bugs.launchpad.net/bugs/35826
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to