firewall-config does not run as root after authentication

Bug #1449631 reported by Zach Villers
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
firewalld (Ubuntu)
New
Undecided
Unassigned

Bug Description

Launching firewall-config from dash asks user to authenticate and then launches normally, however, the process still runs as regular user and not as root. Changes are unable to be made from Options -> change default zone of connections. The menu lists no connections. In the default zone, connections can be seen as sources. See Screenshot 1.

Running sudo firewall-config from terminal does allow changes from Options -> change default zone of connections. The menu does list connections. See Screenshot 2.

Running ps -ef | grep firewall from terminal shows that the process, when run from dash and authenticated still runs as regular user. When run as sudo firewall-config the process does run as root. See Screenshot 3.

Package is firewall-applet.

I do not know if this is a security issue or if there are further issues when running from dash.

ProblemType: Bug
DistroRelease: Ubuntu 15.04
Package: firewall-applet 0.3.12-1
ProcVersionSignature: Ubuntu 3.19.0-15.15-generic 3.19.3
Uname: Linux 3.19.0-15-generic x86_64
NonfreeKernelModules: nvidia
ApportVersion: 2.17.2-0ubuntu1
Architecture: amd64
CurrentDesktop: Unity
Date: Tue Apr 28 11:20:49 2015
ExecutablePath: /usr/bin/firewall-config
InstallationDate: Installed on 2015-03-22 (37 days ago)
InstallationMedia: Ubuntu 14.10 "Utopic Unicorn" - Release amd64 (20141022.1)
InterpreterPath: /usr/bin/python2.7
PackageArchitecture: all
ProcEnviron:
 LANGUAGE=en_US
 PATH=(custom, user)
 XDG_RUNTIME_DIR=<set>
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SourcePackage: firewalld
UpgradeStatus: No upgrade log present (probably fresh install)

Revision history for this message
Zach Villers (zachvatwork) wrote :
Revision history for this message
MilkThief (evazzoler) wrote :

Since 2015 for 2 years this bug where not be fixed.
Really good!

Revision history for this message
Laurent Bigonville (bigon) wrote :

Well the fact that it's not running as root is not the issue here as GUI should never run as root.

However, if you are part of the sudo group on the machine, you should be able to change the default zone. The issue is/was somewhere else.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.