Actually, that's the whole point. sally (or whoever) isn't necessarily
supposed to know normans' password. A non-admin(sudoer) is being offered
admin privileges when they shouldn't be. All non-admin(sudoer) users
should be denied access regardless of the password given.
** Changed in: ubuntu
Status: Invalid => Opinion
--
privilege escalation
https://bugs.launchpad.net/bugs/681685
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs