Live CD does not give the usual hint to users that they are doing something harmful (sudo!)

Bug #32849 reported by X
12
Affects Status Importance Assigned to Milestone
gksu (Ubuntu)
Confirmed
Wishlist
Unassigned

Bug Description

When using the LiveCD you conveniently skip the authentication when using sudo (entirely transparently).

The pratical implication of normal sudo usage is that the user can do anything it wants, but has to think before trying certain things.. sudo&gksudo is the warning!

However, with the LiveCD, there is no such warning when you run applications.
True -- the default filesystem can't be harmed, but for example gParted can be launched and without warning a user might destroy data he didn't intend to do.

We should, in dapper or later:
Ship the live cd with a special version of gksudo that simply informs the user what's going to happen and would normally happen, with a link to a help text about sudo.

VF (vfiend)
Changed in gksu:
status: Unconfirmed → Confirmed
Revision history for this message
Martin Pitt (pitti) wrote :

It would not do any good security-wise, since it is widely know that the 'ubuntu' user password on the live CD is empty. But yes, for my sake let's keep it open as a wishlist bug.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.