user has permissions to /sbin

Bug #6111 reported by faked
4
Affects Status Importance Assigned to Milestone
Ubuntu
Invalid
Critical
Unassigned

Bug Description

I just discovered in dapper that every user has permissions to /sbin without sudo.
I just wrote a new partition table as user without sudo:
cfdisk /dev/hda

Revision history for this message
Daniel T Chen (crimsun) wrote :

Cannot reproduce this report on either Flight 1, Flight 2, or current Dapper. Please give output from ``ls -l /sbin/cfdisk'' and strace (as a normal user).

Revision history for this message
Paul Sladen (sladen) wrote :

It is possible to runs programs in '/sbin/', ...I use the following on a frequent basis:

  /usr/sbin/iwconfig
  /sbin/lsmod
  /sbin/ifconfig

but none of these commands will doing that makes changes without priviliges (eg. running under sudo).

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.