ingo, users can only aquire root permissions using sudo *if* they are
part of the admin group. It is not a security risk to let them use their
own passwords, because they are trusted users, otherwise they would not
appear in the admin group.

Policykit now does not parse /etc/sudoers at all, and statically allows
every user in the admin group (which is the default ubuntu setting) to
get root permissions. This was discussed in january on the ubuntu-devel
mailinglist [1]. If you feel this is not right, please either open a bug
for policykit or post to the appropriate mailinglist.

** Changed in: gnome-system-tools (Ubuntu)
       Status: Confirmed => Won't Fix

** This bug is no longer flagged as a security issue

-- 
users-admin ignores setting in /etc/sudoers
https://bugs.launchpad.net/bugs/196491
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to