Re: KDE remembers root password for graphical applications

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Actually, it only caches the credentials for 5 minutes and forgets them. This is an aspect of the sudo command, which is called by the GUI applications. There is a way to change the timeout, but the method for doing so eludes me at the moment. It might be asiest to just wait the 5 minutes for the credentials to expire.

--James Cooley



linux@xxxxxxxxxxxxxxxxxx wrote:

Hi!

I recognised under RHEL WS3, that KDE remembers the root password once a
graphical application required root authentication and it was typed in. That
means that a second root authentication is not taking place, and the application
which requires a root password opens without it.

Example:
$ redhat-config-users
-> opening the usermanager for the first time, asks for the root password, OK.
=> opening now the same or any other graphical application that requires root
autentication, don't ask for the root password anymore, they just open.

Any ideas where I can disable this behaviour (seems to be a security hole).

Thanks!
Marcel Fritzenwallner








--
--
James Cooley
Sr. Systems Analyst
Information Technology
Florida Tech
321-674-7999
jcooley@xxxxxxxxxx

--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

[Index of Archives]     [CentOS]     [Kernel Development]     [PAM]     [Fedora Users]     [Red Hat Development]     [Big List of Linux Books]     [Linux Admin]     [Gimp]     [Asterisk PBX]     [Yosemite News]     [Red Hat Crash Utility]


  Powered by Linux