Package: gksu Version: 1.9.1-2 Severity: minor gksudo should not offer to remember the user's password (particularly not in the keyring). If the local administrator wanted the user to be able to run the command without typing a password, he would have used NOPASSWD: in /etc/sudoers. Thus, this feature violates local security policy, making it a security risk, and it should be removed.
(This bug probably deserves to be forwarded upstream and handled there.) --Ken Bloom -- System Information: Debian Release: testing/unstable APT prefers unstable APT policy: (500, 'unstable'), (1, 'experimental') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.16-rc6-1ken Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Versions of packages gksu depends on: ii gnome-keyring 0.4.9-1 GNOME keyring services (daemon and ii libatk1.0-0 1.12.1-1 The ATK accessibility toolkit ii libc6 2.3.6-15 GNU C Library: Shared libraries ii libcairo2 1.2.0-3 The Cairo 2D vector graphics libra ii libfontconfig1 2.3.2-7 generic font configuration library ii libgconf2-4 2.14.0-1 GNOME configuration database syste ii libgksu2-0 1.9.5-1 library providing su and sudo func ii libglib2.0-0 2.10.3-3 The GLib library of C routines ii libgnome-keyring0 0.4.9-1 GNOME keyring services library ii libgtk2.0-0 2.8.18-1 The GTK+ graphical user interface ii liborbit2 1:2.14.0-2 libraries for ORBit2 - a CORBA ORB ii libpango1.0-0 1.12.3-1 Layout and rendering of internatio ii libstartup-notification0 0.8-1 library for program launch feedbac ii libx11-6 2:1.0.0-7 X11 client-side library ii libxcursor1 1.1.5.2-5 X cursor management library ii libxext6 1:1.0.0-4 X11 miscellaneous extension librar ii libxfixes3 1:3.0.1.2-4 X11 miscellaneous 'fixes' extensio ii libxi6 1:1.0.0-5 X11 Input extension library ii libxinerama1 1:1.0.1-4 X11 Xinerama extension library ii libxrandr2 2:1.1.0.2-4 X11 RandR extension library ii libxrender1 1:0.9.0.2-4 X Rendering Extension client libra ii sudo 1.6.8p12-4 Provide limited super user privile gksu recommends no packages. -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
