Bug 424382

Summary: About hyperlink opens webbrowser as root
Product: [Applications] KSystemLog Reporter: Richard <richard.epost>
Component: generalAssignee: Nicolas Ternisien <nicolas.ternisien>
Status: RESOLVED DUPLICATE    
Severity: normal CC: nicolas.fella
Priority: NOR    
Version: 20.04   
Target Milestone: ---   
Platform: Kubuntu   
OS: Linux   
Latest Commit: Version Fixed In:
Sentry Crash Report:

Description Richard 2020-07-18 19:15:18 UTC 
SUMMARY
Version 19.12.3
https://www.kde.org/applications/system/ksystemlog/ clicking this link opens firefox as root user.

STEPS TO REPRODUCE
1. help>about click link
2. 
3. 

OBSERVED RESULT


EXPECTED RESULT


SOFTWARE/OS VERSIONS
Windows: 
macOS: 
Linux/KDE Plasma: 
(available in About System)
KDE Plasma Version: 
KDE Frameworks Version: 
Qt Version: 

ADDITIONAL INFORMATION

Operating System: Kubuntu 20.04
KDE Plasma Version: 5.18.5
KDE Frameworks Version: 5.68.0
Qt Version: 5.12.8
Kernel Version: 5.4.0-40-generic
OS Type: 64-bit
Processors: 8 × Intel® Core™ i7-2600 CPU @ 3.40GHz
Memory: 7,8 Gibyte
Comment 1 Nicolas Fella 2020-07-19 15:20:04 UTC 
Did you start ksystemlog as root?
Comment 2 Richard 2020-07-19 19:37:05 UTC 
It asks for password at start. Maybe not necessary toask for password it seem to work just as well ckicking "ignore".
Comment 3 Nicolas Fella 2020-07-19 21:13:06 UTC 
I see what is happening. 

When entering the password ksystemlog indeed is run as the root user and that then propagates that to Firefox.

When ignoring the password request ksystemlog is started as normal user and thus Firefox should be started normally, too.

IMHO ksysguard shouldn't be run as root at all and all privileged actions should use proper polkit auth, but I don't know the code well enough for a proper judgement
Comment 4 Nicolas Fella 2020-07-19 21:13:56 UTC 
s/ksysguard/ksystemlog/ obviously
Comment 5 Christoph Feck 2020-08-03 18:37:40 UTC 

*** This bug has been marked as a duplicate of bug 354106 ***