** No longer affects: gdm-guest-session (Ubuntu)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/604180
Title:
gksu and sudo broken in guest session
To manage notifications about this bug go to:
http
Nothing to do in gdm-guest-session, so setting status "Invalid". Leaving
package gksu (ubuntu) unchanged.
** Changed in: gdm-guest-session (Ubuntu)
Status: Confirmed => Invalid
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
ht
Does not sound good, considering the security aspects. :(
Please note that Debian should probably be involved.
https://wiki.ubuntu.com/Debian/ForUbuntuDevelopers
I noticed that the version of gksu, that is available for Maverick, is
considered unstable by Debian. http://packages.debian.org/gksu
I'm trying to. I've found the particular problem, but this code is
riddled with bugs.
--
gksu and sudo broken in guest session
https://bugs.launchpad.net/bugs/604180
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing
I didn't dig that deep in the code, but your analysis sounds plausible
to me. Are you possibly about to write a patch? :)
--
gksu and sudo broken in guest session
https://bugs.launchpad.net/bugs/604180
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed
Ok, that's what I hoped you meant. :)
As I understand gksudo, it is in fact a wrapper for sudo. That is, it
always calls sudo regardless, and parses its output to determine if
password entry was successful. The source of this bug is that sudo
aborts with an error message that gksudo didn't expect.
Of course I don't want to allow 'guest' users to use su or sudo; sorry
if I didn't express myself clear.
When a regular desktop user tries to load Synaptic, s/he is prompted for
the password, and in the next step an error dialog (see attached file)
is shown. By skipping the password prompting for
That depends what you mean by "skip." Obviously, gksu should not allow
the program given by its parameter to be executed if the user is guest;
if it did, that would be a huge security hole. The correct solution is
to mirror the behavior of sudo in a similar situation: if he has no
password, displa
The 'guest' user created by gdm-guest-session is a passwordless system
user by design, and gksu fails when trying to prompt for a password. One
way to make the error dialog appear might be that gksu checks whether
the GDMSESSION environment variable equals 'guest-restricted', and skips
the password
** Package changed: gksu (Ubuntu) => gdm-guest-session (Ubuntu)
--
gksu and sudo broken in guest session
https://bugs.launchpad.net/bugs/604180
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
ubuntu-bugs@list
10 matches
Mail list logo
