Bug 424382 - About hyperlink opens webbrowser as root
Summary: About hyperlink opens webbrowser as root
Status: RESOLVED DUPLICATE of bug 354106
Alias: None
Product: KSystemLog
Classification: Applications
Component: general (show other bugs)
Version: 20.04
Platform: Kubuntu Linux
: NOR normal
Target Milestone: ---
Assignee: Nicolas Ternisien
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2020-07-18 19:15 UTC by Richard
Modified: 2020-08-03 18:37 UTC (History)
1 user (show)

See Also:
Latest Commit:
Version Fixed In:
Sentry Crash Report:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Richard 2020-07-18 19:15:18 UTC
SUMMARY
Version 19.12.3
https://www.kde.org/applications/system/ksystemlog/ clicking this link opens firefox as root user.

STEPS TO REPRODUCE
1. help>about click link
2. 
3. 

OBSERVED RESULT


EXPECTED RESULT


SOFTWARE/OS VERSIONS
Windows: 
macOS: 
Linux/KDE Plasma: 
(available in About System)
KDE Plasma Version: 
KDE Frameworks Version: 
Qt Version: 

ADDITIONAL INFORMATION

Operating System: Kubuntu 20.04
KDE Plasma Version: 5.18.5
KDE Frameworks Version: 5.68.0
Qt Version: 5.12.8
Kernel Version: 5.4.0-40-generic
OS Type: 64-bit
Processors: 8 × Intel® Core™ i7-2600 CPU @ 3.40GHz
Memory: 7,8 Gibyte
Comment 1 Nicolas Fella 2020-07-19 15:20:04 UTC
Did you start ksystemlog as root?
Comment 2 Richard 2020-07-19 19:37:05 UTC
It asks for password at start. Maybe not necessary toask for password it seem to work just as well ckicking "ignore".
Comment 3 Nicolas Fella 2020-07-19 21:13:06 UTC
I see what is happening. 

When entering the password ksystemlog indeed is run as the root user and that then propagates that to Firefox.

When ignoring the password request ksystemlog is started as normal user and thus Firefox should be started normally, too.

IMHO ksysguard shouldn't be run as root at all and all privileged actions should use proper polkit auth, but I don't know the code well enough for a proper judgement
Comment 4 Nicolas Fella 2020-07-19 21:13:56 UTC
s/ksysguard/ksystemlog/ obviously
Comment 5 Christoph Feck 2020-08-03 18:37:40 UTC

*** This bug has been marked as a duplicate of bug 354106 ***