So, basically we need to sudo proof our gui applications, because it's
not obvious that we must use kdesudo.

Is this error message stays even when I've closed the sudo'ed application.
I hope it doesn't stay on next login.
-AP (Kubuntu 8.10)



and could this be a security  problem?  I mean, why would the cache normally be 
owned by user 0 (root)...   and if it's owned by my user 1000, that means that 
if I leave it open for someone else to use they could put whatever they want 
into that cache... and if it gets ran with superuser privildges then we have an 
exploit.

This is like saying:
"safely run  program x"
which has been in use for years and is standard, and then later learning that 
one must run

"pretty please safely run the program x"
which isn't given as a warning or anything when we run sudo.

Maybe making a complicated alias where if a program off of the list of
gui programs is considered would work. that gives an error message that
use of our common and hiddenly misunderstood sudo is deprecated.

-- 
/var/tmp/kdecache
https://bugs.launchpad.net/bugs/154724
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to