Comment 0 for bug 489144

Revision history for this message
amonnet (tonio+ubu) wrote :

Binary package hint: pulseaudio

The /usr/lib/pm-utils/sleep.d/01PulseAudio uses sudo to execute pacmd as an unprivileged user.

On my system, i receive sudo mails, usually indicating a violation of sudo policies, with this subject "*** SECURITY information for system ***", whenever the system resume, about 5 mails per connectd user.

I think it is a missuse of sudo, which is described as 'Provide limited super user privileges to specific users', where here in the pulseaudio case, we want the root user executing some command with user privilege. Su command, described as 'The su command is used to become another user during a login session', is really the tool we want here.

By the way, pulseaudio fails to depends on sudo ...

Following is a patch to 01PulseAudio script.

PS:
I must add that this system uses libpam-ldap and libnss-ldap for the given users, but sudo is otherwise fully functionnal and doesn't send these mail when i use it on a console. The problem might be due to the network being down at that time...