#5537 HIGH Update.: Use sudo, not su, to get root.

[Zarro Boogs per Child]

#5537: Use sudo, not su, to get root.
---------------------+------------------------------------------------------
  Reporter:  cscott  |       Owner:  cscott  
      Type:  defect  |      Status:  new     
  Priority:  high    |   Milestone:  Update.1
 Component:  distro  |     Version:          
Resolution:          |    Keywords:          
  Verified:  0       |    Blocking:          
 Blockedby:          |  
---------------------+------------------------------------------------------

Comment(by cscott):

 The patch does not yet fix the security problem: because olpc has no
 password, any activity can su to olpc, and then sudo to root.  Albert, is
 there a way to configure su to allow olpc/wheel to su to root while
 disallowing su to olpc?

-- 
Ticket URL: <http://dev.laptop.org/ticket/5537#comment:24>
One Laptop Per Child <http://dev.laptop.org>
OLPC bug tracking system