https://bugzilla.novell.com/show_bug.cgi?id=776075 https://bugzilla.novell.com/show_bug.cgi?id=776075#c0 Summary: Dolphin terminal (console) remembers su (root) login after closing Classification: openSUSE Product: openSUSE 12.1 Version: Final Platform: x86-64 OS/Version: openSUSE 12.1 Status: NEW Severity: Major Priority: P5 - None Component: KDE4 Applications AssignedTo: kde-maintainers@suse.de ReportedBy: me@kalenz.eu QAContact: qa-bugs@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:14.0) Gecko/20100101 Firefox/14.0.1 When closing a terminal emulator after switching to su mode (root), the expectation is that su has been logged out. In other words, when the terminal is reopened, it has local user privileges only. Reproducible: Always Steps to Reproduce: 1. Open Dolphin from a local user (non-root) KDE session. 2. Hit F4 to bring up the terminal panel. 3. Write "su" enter, type root password --> gain root privileges. 4. Hit F4 again --> terminal closes. 5. On the same Dolphin window, hit F4 again... Actual Results: ...surprise, you're still root!! Expected Results: Should have lost root privileges after closing the terminal panel. In everyday office work, many Dolphin windows can be open at once, and stay open for days or weeks. Due to this bug, a "hidden" root login can remain active for a long time on machines accessible to many users, and "reappear" when someone just happens to press F4 on the same window. Reporting as "Major" severity due to security concern. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.