Public bug reported: I can use the system-tools without being asked for a password. I can add new users, put them in the admin group etc. without myself being in the admin group. useradd wouldn't work without proper rights though. I can also set clock with time-admin without proper permissions. (date doesn't allow it) I can remove/add services with service-admin. The permissions on the executables include no setuid or similar: -rwxr-xr-x 1 root root 94556 2006-09-06 16:51 /usr/bin/network-admin -rwxr-xr-x 1 root root 49012 2006-09-06 16:51 /usr/bin/services-admin -rwxr-xr-x 1 root root 65908 2006-09-06 16:51 /usr/bin/shares-admin -rwxr-xr-x 1 root root 82640 2006-09-06 16:51 /usr/bin/time-admin -rwxr-xr-x 1 root root 74744 2006-09-06 16:51 /usr/bin/users-admin
I upgraded this system from dapper to edgy. gnome-system-tools 2.15.3-0ubuntu1 libgksu1.2-1 1.3.8-1ubuntu1 libgksu2-0 1.9.8-1ubuntu2 sudo 1.6.8p12-4ubuntu4 ** Affects: gnome-system-tools (Ubuntu) Importance: Untriaged Status: Unconfirmed -- Can do admin tasks without a password or being in group admin https://launchpad.net/bugs/59485 -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs