Bug 15560

Summary:	Non-Root Users can Run the /usr/sbin/setup
Product:	[Retired] Red Hat Linux	Reporter:	Brian Z <brian>
Component:	setup	Assignee:	Bill Nottingham <notting>
Status:	CLOSED RAWHIDE	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	6.2	CC:	rvokal
Target Milestone:	---
Target Release:	---
Hardware:	i386
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2000-08-06 13:45:05 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Brian Z 2000-08-06 13:45:01 UTC

Non-Root Users can run /usr/sbin/setup.  The program runs normally.  When users try to change things, a whole bunch
of errors fly by and you are displayed with the main menu again.  Maybe we should do a root user check to help
pervent any security exploits in the future?  If nothing else, the normal users have no business being in there
anyway.  Thanks!

Comment 1 Bill Nottingham 2000-08-06 17:12:31 UTC

Since none of the tools are setuid, there's no way this
can be used for a security exploit; the tools will
just fail in various ways.

It's certainly better for it cosmetically to just not
run if not root, though. Fixed in setuptool-1.5-1.