Public bug reported:
Binary package hint: gnome-system-tools
In the Ubuntu debian-installer, it checks for reserved names such as
'admin', ie. you can't use admin as the username when creating the first
user.
The Gnome Users and Groups allows you to create a user called admin. If
users shouldn't create users called 'admin', then users-admin should not
allow it.
I mark this as a security vulnerability, because it affects system
security. When a user might unwittingly add a user called admin (which
is quite plausible), and then remove the user again for some reason,
then the group 'admin' will be gone too, which means that no one on the
system will have sudo root access, and updates won't take place, causing
even more potential problems.
** Affects: gnome-system-tools (Ubuntu)
Importance: Medium
Assignee: Ubuntu Desktop Bugs
Status: Rejected
--
users-admin does not check usernames for reserved system names/groups
https://launchpad.net/bugs/67378
--
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
