| 2009-11-27 10:47:16 |
amonnet |
bug |
|
|
added bug |
| 2009-11-27 10:51:49 |
amonnet |
attachment added |
|
patch out sudo for su in pm-utils/sleep.d/01PulseAudio script http://launchpadlibrarian.net/36146582/pa_su.patch |
|
| 2009-11-27 11:05:17 |
amonnet |
description |
Binary package hint: pulseaudio
The /usr/lib/pm-utils/sleep.d/01PulseAudio uses sudo to execute pacmd as an unprivileged user.
On my system, i receive sudo mails, usually indicating a violation of sudo policies, with this subject "*** SECURITY information for system ***", whenever the system resume, about 5 mails per connectd user.
I think it is a missuse of sudo, which is described as 'Provide limited super user privileges to specific users', where here in the pulseaudio case, we want the root user executing some command with user privilege. Su command, described as 'The su command is used to become another user during a login session', is really the tool we want here.
By the way, pulseaudio fails to depends on sudo ...
Following is a patch to 01PulseAudio script.
PS:
I must add that this system uses libpam-ldap and libnss-ldap for the given users, but sudo is otherwise fully functionnal and doesn't send these mail when i use it on a console. The problem might be due to the network being down at that time... |
Binary package hint: pulseaudio
The /usr/lib/pm-utils/sleep.d/01PulseAudio uses sudo to execute pacmd as an unprivileged user.
On my system, i receive sudo mails, usually indicating a violation of sudo policies, with this subject "*** SECURITY information for system ***", whenever the system resumes, about 5 mails per connected user.
I think it is a missuse of sudo, which is described as 'Provide limited super user privileges to specific users', where here we want the root user executing some command with user privilege. Su command, described as 'The su command is used to become another user during a login session', is really the tool we want here.
By the way, pulseaudio fails to depends on sudo ...
Following is a patch to 01PulseAudio script.
PS:
I must add that this system uses libpam-ldap and libnss-ldap for the given users, but sudo is otherwise fully functionnal and doesn't sends theses mails when i issue it on a console. The problem might be due to the network being down at that time...
|
|
| 2009-11-27 11:05:56 |
amonnet |
description |
Binary package hint: pulseaudio
The /usr/lib/pm-utils/sleep.d/01PulseAudio uses sudo to execute pacmd as an unprivileged user.
On my system, i receive sudo mails, usually indicating a violation of sudo policies, with this subject "*** SECURITY information for system ***", whenever the system resumes, about 5 mails per connected user.
I think it is a missuse of sudo, which is described as 'Provide limited super user privileges to specific users', where here we want the root user executing some command with user privilege. Su command, described as 'The su command is used to become another user during a login session', is really the tool we want here.
By the way, pulseaudio fails to depends on sudo ...
Following is a patch to 01PulseAudio script.
PS:
I must add that this system uses libpam-ldap and libnss-ldap for the given users, but sudo is otherwise fully functionnal and doesn't sends theses mails when i issue it on a console. The problem might be due to the network being down at that time...
|
Binary package hint: pulseaudio
The /usr/lib/pm-utils/sleep.d/01PulseAudio uses sudo to execute pacmd as an unprivileged user.
On my system, i receive sudo mails, usually indicating a violation of sudo policies, with this subject "*** SECURITY information for system ***", whenever the system resumes, about 5 mails per connected user.
I think it is a missuse of sudo, which is described as 'Provide limited super user privileges to specific users', where here we want the root user executing some command with user privilege. Su command, described as 'The su command is used to become another user during a login session', is really the tool we want here.
By the way, pulseaudio fails to depend on sudo ...
Following is a patch to 01PulseAudio script.
PS:
I must add that this system uses libpam-ldap and libnss-ldap for the given users, but sudo is otherwise fully functionnal and doesn't sends theses mails when i issue it on a console. The problem might be due to the network being down at that time...
|
|
| 2010-01-29 19:44:21 |
Launchpad Janitor |
branch linked |
|
lp:~crimsun/pulseaudio/ubuntu |
|
| 2010-01-29 19:57:24 |
Daniel T Chen |
pulseaudio (Ubuntu): importance |
Undecided |
Medium |
|
| 2010-01-29 19:57:24 |
Daniel T Chen |
pulseaudio (Ubuntu): status |
New |
Fix Committed |
|
| 2010-01-29 19:57:24 |
Daniel T Chen |
pulseaudio (Ubuntu): assignee |
|
Daniel T Chen (crimsun) |
|
| 2010-01-30 15:00:08 |
Launchpad Janitor |
pulseaudio (Ubuntu): status |
Fix Committed |
Fix Released |
|
| 2010-01-30 15:08:20 |
Launchpad Janitor |
branch linked |
|
lp:ubuntu/pulseaudio |
|
