ingo, users can only aquire root permissions using sudo *if* they are part of the admin group. It is not a security risk to let them use their own passwords, because they are trusted users, otherwise they would not appear in the admin group.
Policykit now does not parse /etc/sudoers at all, and statically allows every user in the admin group (which is the default ubuntu setting) to get root permissions. This was discussed in january on the ubuntu-devel mailinglist [1]. If you feel this is not right, please either open a bug for policykit or post to the appropriate mailinglist. ** Changed in: gnome-system-tools (Ubuntu) Status: Confirmed => Won't Fix ** This bug is no longer flagged as a security issue -- users-admin ignores setting in /etc/sudoers https://bugs.launchpad.net/bugs/196491 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs