ingo, users can only aquire root permissions using sudo *if* they are
part of the admin group. It is not a security risk to let them use their
own passwords, because they are trusted users, otherwise they would not
appear in the admin group.
Policykit now does not parse /etc/sudoers at all, and statically allows
every user in the admin group (which is the default ubuntu setting) to
get root permissions. This was discussed in january on the ubuntu-devel
mailinglist [1]. If you feel this is not right, please either open a bug
for policykit or post to the appropriate mailinglist.
** Changed in: gnome-system-tools (Ubuntu)
Status: Confirmed => Won't Fix
** This bug is no longer flagged as a security issue
--
users-admin ignores setting in /etc/sudoers
https://bugs.launchpad.net/bugs/196491
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs