#6319 NORM Never A: sudo and su don't ask for password

[Zarro Boogs per Child]

#6319: sudo and su don't ask for password
---------------------+------------------------------------------------------
  Reporter:  mikus   |       Owner:  jg                               
      Type:  defect  |      Status:  reopened                         
  Priority:  normal  |   Milestone:  Never Assigned                   
 Component:  distro  |     Version:  Development build as of this date
Resolution:          |    Keywords:                                   
  Verified:  0       |    Blocking:                                   
 Blockedby:          |  
---------------------+------------------------------------------------------

Comment(by AlbertCahalan):

 Replying to [comment:5 mikus]:
 > I'm going to reopen this -- it is getting to be the end of March 2008,
 and both the latest Update.1 and the latest Joyride STILL exhibit the
 behavior ("not asking for a password") which caused me to write this
 ticket.

 The existing behavior is an appropriate default. I can see two options for
 you.

 Good: Edit /etc/pam.d/su and be happy.

 Better: Contribute an SE Linux policy that implements Bitfrost, allowing
 the abuse of UID to be discontinued. (hint: you need to create rules on-
 the-fly for new activities)

-- 
Ticket URL: <http://dev.laptop.org/ticket/6319#comment:6>
One Laptop Per Child <http://laptop.org/>
OLPC bug tracking system