Bug 353 – Sudo isn't asking for password in Ubuntu9's dialog Run Command

Bug 353 - Sudo isn't asking for password in Ubuntu9's dialog Run Command


Summary:	Sudo isn't asking for password in Ubuntu9's dialog Run Command

Status:	RESOLVED FIXED

Product:	Sudo
Classification:	Unclassified
Component:	Sudo
Version:	1.6.9
Hardware:	PC Linux

Importance:	normal security
Assigned To:	Todd C. Miller

URL:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2009-05-08 16:33 MDT by adrianopaulino123
Modified:	2010-08-02 15:04 MDT (History)
CC List:	1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description adrianopaulino123 2009-05-08 16:33:44 MDT

When it's pressioned the keys ALT + F2 in Ubuntu 9 the dialog Run Command is opened. If the command - sudo <application> - is called the sudo is executed without ask for password. That is a bug in security.

Comment 1 Todd C. Miller 2010-08-02 15:04:53 MDT

I'm guessing this has to do with commands not associated with a tty all using the same time stamp file in sudo versions prior to 1.7.3.  For sudo 1.7.3 and above if there is no tty (such as in a graphical application), sudo will always ask for a password.