[Bug 89] New: "su" password cached for "arklinux" user
bugzilla-daemon <[email protected]>
| Newsgroups | gmane.linux.arklinux.bugs |
|---|---|
| Message-ID | <[email protected]> |
https://bugzilla.arklinux.org/bugzilla/show_bug.cgi?id=89
Summary: "su" password cached for "arklinux" user
Product: Ark Linux
Version: 1.0 alpha6
Platform: i586 (PC, Intel)
OS/Version: All
Status: NEW
Severity: Security
Affects: Overall Usability
Component: coreutils
AssignedTo: [email protected]
ReportedBy: [email protected]
QAContact: [email protected]
Description of Problem:
After changing the default root password, "arklinux" user can su without needing
to enter a password. This is insecurity doubleplus.
Version-Release number of selected component (if applicable):
su (coreutils) 4.5.3
How Reproducible:
Extremely.
Steps to Reproduce:
1. Log in as "arklinux"
2. Type "su"
3. No password prompt, you will now have root
Actual Results:
Root gained without needing a password
Expected Results:
password prompt.
Additional Information:
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
You are the QA contact for the bug, or are watching the QA contact.