Bug 130054

Summary:	Konsole invokes "New Root Shell" without asking for password
Product:	[Applications] konsole	Reporter:	Mike Wells <mike_wells>
Component:	general	Assignee:	Konsole Developer <konsole-devel>
Status:	RESOLVED NOT A BUG
Severity:	normal
Priority:	NOR
Version:	1.6.2
Target Milestone:	---
Platform:	unspecified
OS:	Linux
Latest Commit:		Version Fixed In:

Description Mike Wells 2006-06-30 03:09:01 UTC

Version:           1.6.2 (using KDE 3.5.2, Kubuntu Package 4:3.5.2-0ubuntu18 dapper)
Compiler:          Target: i486-linux-gnu
OS:                Linux (i686) release 2.6.15-25-386

Session>New Root Shell invokes a root shell without asking for the user password. The command in Settings>Configure Konsole>Session is "sudo su -". Issuing this same command (or "sudo su -i") from a normal shell invokes the "Password:" response. This appears to be a somewhat intermittent bug because on occasion when opening a New Root Shell it does respond with the "Password:" response when the new shell is opened but this is the exception, not the rule. Kinda scary! I have to give up my password to change screen resolution but the entire kingdom is up for grabs by running Konsole and invoking a root shell.

Comment 1 George Staikos 2006-06-30 04:09:45 UTC

This is not and cannot be a konsole bug.  Perhaps sudo is caching this.

Comment 2 Mike Wells 2006-06-30 16:50:23 UTC

Thanks George. "sudo" is caching; for 15 minutes to be precise (including post login).