[Bug 339922] New: kdesu (YaST2) does not accept root password
https://bugzilla.novell.com/show_bug.cgi?id=339922 Summary: kdesu (YaST2) does not accept root password Product: openSUSE 10.3 Version: Final Platform: 32bit OS/Version: openSUSE 10.3 Status: NEW Severity: Normal Priority: P5 - None Component: KDE AssignedTo: kde-maintainers@suse.de ReportedBy: carlos.lange@ualberta.ca QAContact: qa@suse.de Found By: --- After changing /etc/sudoers to allow "sudo" with user password, kdesu does not accept root password anymore. The relevant changes in sudoers were: User_Alias FULLADMIN = clange Defaults:FULLADMIN authenticate FULLADMIN PLACE = PASSWD: ALL whereas root remained as: root ALL=(ALL) ALL This allows user clange to start anything with kdesu using the user's password, which I think makes sense. However, at the same time the root password is completely disabled in kdesu (works anywhere else, such as CLI, Kwallet, etc). This behaviour may seem OK while user clange is logged in, but it prevents authentication of kdesu in sessions of any other non-privileged users. In other words, if another user is logged in, the user cannot start YaST2, even if the user types in the root password. I would suggest that kdesu should honour /etc/sudoers, but at the same time unconditionally accept the root password as authentication. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=339922#c1
Will Stephenson
https://bugzilla.novell.com/show_bug.cgi?id=339922#c2
--- Comment #2 from Carlos Lange
participants (1)
-
bugzilla_noreply@novell.com