Bug 353

Summary:	Sudo isn't asking for password in Ubuntu9's dialog Run Command
Product:	Sudo	Reporter:	adrianopaulino123
Component:	Sudo	Assignee:	Todd C. Miller <Todd.Miller>
Status:	RESOLVED FIXED
Severity:	security	CC:	adrianopaulino123
Priority:	normal
Version:	1.6.9
Hardware:	PC
OS:	Linux

Description adrianopaulino123 2009-05-08 16:33:44 MDT

When it's pressioned the keys ALT + F2 in Ubuntu 9 the dialog Run Command is opened. If the command - sudo <application> - is called the sudo is executed without ask for password. That is a bug in security.

Comment 1 Todd C. Miller 2010-08-02 15:04:53 MDT

I'm guessing this has to do with commands not associated with a tty all using the same time stamp file in sudo versions prior to 1.7.3.  For sudo 1.7.3 and above if there is no tty (such as in a graphical application), sudo will always ask for a password.