| 2009-02-09 13:40:28 |
Björn Rabethge |
bug |
|
|
added bug |
| 2009-02-10 16:00:24 |
Björn Rabethge |
description |
Ubuntu 8.10 / gnome
When you add a new user using the gnome built in user managment and name the user 'admin' it will overwrite the privileged user group admin with a new group id (>1000) and delete all other users from this group.
As a result all other users (also the one performing the action) will loose admin privileges and sudo rights.
This step is also very hard to take back, a simple 'sudo adduser otherusers admin' wont help since the groupid is changed and even changing the gid back to the original value is not enough. I had to reset the whole usergroups in order to be able to access administrative tools in gnome again.
kde overcomes this problem by adding '_#' to the usergroup in case it allready exists. (ie 'admin_1').
I think this is a quite dangerous bug, since it affects especially inexperienced users which rely on the gui. Destroying the user groups managment with a username should not be possible.
I am at work right now and can specify the package. Will add later. |
Ubuntu 8.10 / gnome
When you add a new user using the gnome built in user managment and name the user 'admin' it will overwrite the privileged user group admin with a new group id (>1000) and delete all other users from this group.
As a result all other users (also the one performing the action) will loose admin privileges and sudo rights.
This step is also very hard to take back, a simple 'sudo adduser otherusers admin' wont help since the groupid is changed and even changing the gid back to the original value is not enough.
kde overcomes this problem by adding '_#' to the usergroup in case it allready exists. (ie 'admin_1').
I think this is a quite dangerous bug, since it affects especially inexperienced users which rely on the gui. Destroying the user groups managment with a username should not be possible.
I am at work right now and can specify the package. Will add later. |
|
| 2009-02-20 15:48:41 |
Martin Meredith |
None: status |
New |
Confirmed |
|
| 2009-02-20 15:48:41 |
Martin Meredith |
None: bugtargetdisplayname |
Ubuntu |
gnome-system-tools (Ubuntu) |
|
| 2009-02-20 15:48:41 |
Martin Meredith |
None: bugtargetname |
ubuntu |
gnome-system-tools (Ubuntu) |
|
| 2009-02-20 15:48:41 |
Martin Meredith |
None: statusexplanation |
|
Confirmed... OUCH! |
|
| 2009-02-20 15:48:41 |
Martin Meredith |
None: title |
Bug #327180 in Ubuntu: "naming an new user 'admin' in gnome user managment compromises user groups/rights" |
Bug #327180 in gnome-system-tools (Ubuntu): "naming an new user 'admin' in gnome user managment compromises user groups/rights" |
|
| 2009-02-20 15:56:58 |
Chris Coulson |
gnome-system-tools: status |
Confirmed |
Invalid |
|
| 2009-02-20 15:56:58 |
Chris Coulson |
gnome-system-tools: statusexplanation |
Confirmed... OUCH! |
Thank you for your bug report. This bug has already been reported, but please feel free to report any other bugs you find. |
|
| 2009-02-20 15:57:10 |
Chris Coulson |
marked as duplicate |
|
236305 |
|
