Live CD does not give the usual hint to users that they are doing something harmful (sudo!)
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
gksu (Ubuntu) |
Confirmed
|
Wishlist
|
Unassigned |
Bug Description
When using the LiveCD you conveniently skip the authentication when using sudo (entirely transparently).
The pratical implication of normal sudo usage is that the user can do anything it wants, but has to think before trying certain things.. sudo&gksudo is the warning!
However, with the LiveCD, there is no such warning when you run applications.
True -- the default filesystem can't be harmed, but for example gParted can be launched and without warning a user might destroy data he didn't intend to do.
We should, in dapper or later:
Ship the live cd with a special version of gksudo that simply informs the user what's going to happen and would normally happen, with a link to a help text about sudo.
Changed in gksu: | |
status: | Unconfirmed → Confirmed |
It would not do any good security-wise, since it is widely know that the 'ubuntu' user password on the live CD is empty. But yes, for my sake let's keep it open as a wishlist bug.