Red Hat Bugzilla – Bug 124980
cannot enter password with leading spaces
Last modified: 2007-04-18 13:08:31 EDT
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.6) Gecko/20040510
Description of problem:
consolehelper is intendet to autheticate for root rights to run
priveleged programs. If root password contains a leading space, its
not accepted by the graphical query window, the command line
incarnation works fine.
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1.under gnome choose privileged program, for example "red
2.type in root password with leading spaces
3.the graphical password query window does not disappear and gain access
*** Bug 133805 has been marked as a duplicate of this bug. ***
Fedora Core 2 is now maintained by the Fedora Legacy project for
security updates only. If this problem is a security issue, please
reopen and reassign to the Fedora Legacy product. If it is not a
security issue and hasn't been resolved in the current FC3 updates or
in the FC4 test release, reopen and change the version to match.
Created attachment 113723 [details]
The patch to fix the leading space problem
This patch fixes the the leading spaces problem for usermode-1.68, but should
be applicable to usermode-1.70-2 as well.
Should this be moved to 'devel'?
(I don't think we're likely to patch this for FC2.... while root passwords are
security-related in an inherent sort of way, it's basically a bug fix. Even if
it is a sensible good bug fix.)
Nope, this is fixed already in devel for some time. This won't affect security
at all, note that the patch actually prevents usermode from deleting leading
spaces from passwords, what is pretty odd as the authentization will work with
any authentization tool with passwords with leading spaces but not with
usermode. I strongly recommend to patch the FC2 version of usermode as the bug
seems to be very annoying in some cases.
*** This bug has been marked as a duplicate of 133805 ***
I'm not authorized to access bug #133805. Does that need to remain locked?