[Bug 95] kapabilities caches root password - major security issue

https://bugzilla.arklinux.org/bugzilla/show_bug.cgi?id=95

[email protected] changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |NEEDINFO



------- Additional Comments From [email protected]  2004-05-28 16:04 -------
Responding to this years later.. but..

If you were using a default, unmodified install, the issue was not that the root
password was cached.  Unless you set a password for it, its password was DISABLED.

Also, autologin is the default for standard Ark Home desktop, but will not be
default for the business version.  This can be turned on or off through
Kcontrol.. and the autologin user can also be changed through kcontrol.

ALSO bero has updated kdesu to better integrate with PAM.  Please feel free to
audit the current version(s) of Ark and talk with us about 'How things really work'.

We are fairly certain there are no current security issues, but there has not
been a security audit in a few versions.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
You are the QA contact for the bug, or are watching the QA contact.