<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0//EN" "http://www.w3.org/TR/REC-html40/strict.dtd"><html><head><meta name="qrichtext" content="1" /><style type="text/css">p, li { white-space: pre-wrap; }</style></head><body style=" font-family:'Segoe'; font-size:10pt; font-weight:400; font-style:normal;">Am Monday 23 February 2009 schrieb Alex Merry:<br>
> On Monday 23 February 2009 05:34:26 John Tapsell wrote:<br>
> > A point brought up during the whole .desktop security problem, is<br>
> > kdesudo. It only prompts for the password once, and then from then on<br>
> > (for next X minutes), doesn't ask for the password again.<br>
> ><br>
> > So a program that wants to become root only has to wait until kdesudo<br>
> > has been run normally, and then can run kdesudo itself, elevating<br>
> > itself to root without the user knowing.<br>
><br>
> This is a general problem with sudo. Even if we worked around it in<br>
> kdesudo, an application could still call sudo directly after such an event,<br>
> unless the sudoers file sets the timeout to 0, as Pau mentioned.<br>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><br></p>isn't sudo somehow shellwise restricted (i.e. if you e.g. sudo from one bash, you cannot sudo from another w/o re-entering the password)<br>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><br></p>one could do a semi-UAC thing and at least present an "needs root access -> Yes / No" dialog to get user confirmation...<br>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><br></p>Thomas<br>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><br></p><p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><br></p></body></html>