Bug 650630 - kdesu password-keeping does not work
Summary: kdesu password-keeping does not work
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: kdebase-runtime
Version: 14
Hardware: x86_64
OS: Linux
low
medium
Target Milestone: ---
Assignee: Than Ngo
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2010-11-07 13:55 UTC by Christian Jann
Modified: 2010-11-19 17:10 UTC (History)
10 users (show)

Fixed In Version: kdegames-4.5.3-3.fc14
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2010-11-17 23:18:39 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
KDE Software Compilation 230566 0 None None None Never

Description Christian Jann 2010-11-07 13:55:17 UTC
Description of problem:

If I run:
kdesu -c "touch /root/test"
kdesu -c "touch /root/test" 
two times it will ask me every time for the password and on the console I can
see “kdesu(3277) startApp: Daemon not safe (not sgid), not using it.”

After executing:
sudo groupadd nogroup
sudo chown root:nogroup /usr/libexec/kde4/kdesud
sudo sudo chmod g+s /usr/libexec/kde4/kdesud

a new checkbox appears in the kdesu dialog with the label “Remember password”
and I can execute kdesu -c "touch /root/test" without being asked for a
password again.

Version-Release number of selected component (if applicable):

since Fedora 12

How reproducible:

every time

Steps to Reproduce:
1. kdesu -c "touch /root/test"
   there should be a checkbox with the label “Remember password”
3. kdesu -c "touch /root/test"
   no password dialog should pop up
  
Actual results:

it asks me every time for the password

Expected results:

it will not ask for the password again
execute "konqueror help:/kdesu/sec-password-keeping.html" to see a description

Additional info:

https://bugs.kde.org/show_bug.cgi?id=230566

Comment 1 Oswald Buddenhagen 2010-11-07 14:55:05 UTC
the condensed version of all that is "kdesud should be installed setgid nogroup, but isn't".

thinking about it again, i have no clue why it needs to be setGid in the first place - that doesn't protect anything. to prevent some other process in the user's session from snatching a saved password, it would have to be setUid ...

Comment 2 Rex Dieter 2010-11-12 15:01:45 UTC
doh, thanks!

Comment 3 Fedora Update System 2010-11-12 18:00:51 UTC
akonadi-1.4.1-2.fc14,kde-plasma-yawp-0.3.5-4.fc14,kdeaccessibility-4.5.3-1.fc14,kdeadmin-4.5.3-1.fc14,kdeartwork-4.5.3-1.fc14,kdebase-4.5.3-1.fc14,kdebase-runtime-4.5.3-3.fc14,kdebase-workspace-4.5.3-2.fc14,kdebindings-4.5.3-1.fc14,kdeedu-4.5.3-2.fc14,kdegames-4.5.3-3.fc14,kdegraphics-4.5.3-2.fc14,kdelibs-4.5.3-1.fc14,kdemultimedia-4.5.3-1.fc14,kdenetwork-4.5.3-2.fc14,kdepimlibs-4.5.3-2.fc14,kdeplasma-addons-4.5.3-1.fc14,kdesdk-4.5.3-3.fc14,kdetoys-4.5.3-1.fc14,kdeutils-4.5.3-1.fc14,oxygen-icon-theme-4.5.3-1.fc14,kde-l10n-4.5.3-1.fc14 has been submitted as an update for Fedora 14.
https://admin.fedoraproject.org/updates/akonadi-1.4.1-2.fc14,kde-plasma-yawp-0.3.5-4.fc14,kdeaccessibility-4.5.3-1.fc14,kdeadmin-4.5.3-1.fc14,kdeartwork-4.5.3-1.fc14,kdebase-4.5.3-1.fc14,kdebase-runtime-4.5.3-3.fc14,kdebase-workspace-4.5.3-2.fc14,kdebindings-4.5.3-1.fc14,kdeedu-4.5.3-2.fc14,kdegames-4.5.3-3.fc14,kdegraphics-4.5.3-2.fc14,kdelibs-4.5.3-1.fc14,kdemultimedia-4.5.3-1.fc14,kdenetwork-4.5.3-2.fc14,kdepimlibs-4.5.3-2.fc14,kdeplasma-addons-4.5.3-1.fc14,kdesdk-4.5.3-3.fc14,kdetoys-4.5.3-1.fc14,kdeutils-4.5.3-1.fc14,oxygen-icon-theme-4.5.3-1.fc14,kde-l10n-4.5.3-1.fc14

Comment 4 Fedora Update System 2010-11-12 18:06:54 UTC
akonadi-1.4.1-2.fc13,kde-plasma-yawp-0.3.5-4.fc13,kdeaccessibility-4.5.3-1.fc13,kdeadmin-4.5.3-1.fc13,kdeartwork-4.5.3-1.fc13,kdebase-4.5.3-1.fc13,kdebase-runtime-4.5.3-3.fc13,kdebase-workspace-4.5.3-2.fc13,kdebindings-4.5.3-1.fc13,kdeedu-4.5.3-2.fc13,kdegames-4.5.3-3.fc13,kdegraphics-4.5.3-2.fc13,kdelibs-4.5.3-1.fc13,kdemultimedia-4.5.3-1.fc13,kdenetwork-4.5.3-2.fc13,kdepimlibs-4.5.3-2.fc13,kdeplasma-addons-4.5.3-1.fc13,kdesdk-4.5.3-3.fc13,kdetoys-4.5.3-1.fc13,kdeutils-4.5.3-1.fc13,oxygen-icon-theme-4.5.3-1.fc13,kde-l10n-4.5.3-1.fc13 has been submitted as an update for Fedora 13.
https://admin.fedoraproject.org/updates/akonadi-1.4.1-2.fc13,kde-plasma-yawp-0.3.5-4.fc13,kdeaccessibility-4.5.3-1.fc13,kdeadmin-4.5.3-1.fc13,kdeartwork-4.5.3-1.fc13,kdebase-4.5.3-1.fc13,kdebase-runtime-4.5.3-3.fc13,kdebase-workspace-4.5.3-2.fc13,kdebindings-4.5.3-1.fc13,kdeedu-4.5.3-2.fc13,kdegames-4.5.3-3.fc13,kdegraphics-4.5.3-2.fc13,kdelibs-4.5.3-1.fc13,kdemultimedia-4.5.3-1.fc13,kdenetwork-4.5.3-2.fc13,kdepimlibs-4.5.3-2.fc13,kdeplasma-addons-4.5.3-1.fc13,kdesdk-4.5.3-3.fc13,kdetoys-4.5.3-1.fc13,kdeutils-4.5.3-1.fc13,oxygen-icon-theme-4.5.3-1.fc13,kde-l10n-4.5.3-1.fc13

Comment 5 Fedora Update System 2010-11-14 21:32:52 UTC
kdegames-4.5.3-3.fc14, kdebase-runtime-4.5.3-3.fc14, kdepimlibs-4.5.3-2.fc14, akonadi-1.4.1-2.fc14, kde-plasma-yawp-0.3.5-4.fc14, kdeaccessibility-4.5.3-1.fc14, kdeadmin-4.5.3-1.fc14, kdeartwork-4.5.3-1.fc14, kdebase-4.5.3-1.fc14, kdebase-workspace-4.5.3-2.fc14, kdebindings-4.5.3-1.fc14, kdeedu-4.5.3-2.fc14, kdegraphics-4.5.3-2.fc14, kdelibs-4.5.3-1.fc14, kdemultimedia-4.5.3-1.fc14, kdenetwork-4.5.3-2.fc14, kdeplasma-addons-4.5.3-1.fc14, kdesdk-4.5.3-3.fc14, kdetoys-4.5.3-1.fc14, kdeutils-4.5.3-1.fc14, oxygen-icon-theme-4.5.3-1.fc14, kde-l10n-4.5.3-1.fc14 has been pushed to the Fedora 14 testing repository.  If problems still persist, please make note of it in this bug report.
 If you want to test the update, you can install it with 
 su -c 'yum --enablerepo=updates-testing update kdegames kdebase-runtime kdepimlibs akonadi kde-plasma-yawp kdeaccessibility kdeadmin kdeartwork kdebase kdebase-workspace kdebindings kdeedu kdegraphics kdelibs kdemultimedia kdenetwork kdeplasma-addons kdesdk kdetoys kdeutils oxygen-icon-theme kde-l10n'.  You can provide feedback for this update here: https://admin.fedoraproject.org/updates/akonadi-1.4.1-2.fc14,kde-plasma-yawp-0.3.5-4.fc14,kdeaccessibility-4.5.3-1.fc14,kdeadmin-4.5.3-1.fc14,kdeartwork-4.5.3-1.fc14,kdebase-4.5.3-1.fc14,kdebase-runtime-4.5.3-3.fc14,kdebase-workspace-4.5.3-2.fc14,kdebindings-4.5.3-1.fc14,kdeedu-4.5.3-2.fc14,kdegames-4.5.3-3.fc14,kdegraphics-4.5.3-2.fc14,kdelibs-4.5.3-1.fc14,kdemultimedia-4.5.3-1.fc14,kdenetwork-4.5.3-2.fc14,kdepimlibs-4.5.3-2.fc14,kdeplasma-addons-4.5.3-1.fc14,kdesdk-4.5.3-3.fc14,kdetoys-4.5.3-1.fc14,kdeutils-4.5.3-1.fc14,oxygen-icon-theme-4.5.3-1.fc14,kde-l10n-4.5.3-1.fc14

Comment 6 Fedora Update System 2010-11-17 23:18:09 UTC
kdegames-4.5.3-3.fc14, kdebase-workspace-4.5.3-3.fc14, kdebase-runtime-4.5.3-3.fc14, kdepimlibs-4.5.3-2.fc14, akonadi-1.4.1-2.fc14, kde-plasma-yawp-0.3.5-4.fc14, kdeaccessibility-4.5.3-1.fc14, kdeadmin-4.5.3-1.fc14, kdeartwork-4.5.3-1.fc14, kdebase-4.5.3-1.fc14, kdebindings-4.5.3-1.fc14, kdeedu-4.5.3-2.fc14, kdegraphics-4.5.3-2.fc14, kdelibs-4.5.3-1.fc14, kdemultimedia-4.5.3-1.fc14, kdenetwork-4.5.3-2.fc14, kdeplasma-addons-4.5.3-1.fc14, kdesdk-4.5.3-3.fc14, kdetoys-4.5.3-1.fc14, kdeutils-4.5.3-1.fc14, oxygen-icon-theme-4.5.3-1.fc14, kde-l10n-4.5.3-1.fc14 has been pushed to the Fedora 14 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 7 Fedora Update System 2010-11-17 23:29:27 UTC
kdebase-workspace-4.5.3-3.fc13, akonadi-1.4.1-2.fc13, kde-plasma-yawp-0.3.5-4.fc13, kdeaccessibility-4.5.3-1.fc13, kdeadmin-4.5.3-1.fc13, kdeartwork-4.5.3-1.fc13, kdebase-4.5.3-1.fc13, kdebindings-4.5.3-1.fc13, kdeedu-4.5.3-2.fc13, kdegraphics-4.5.3-2.fc13, kdelibs-4.5.3-1.fc13, kdemultimedia-4.5.3-1.fc13, kdenetwork-4.5.3-2.fc13, kdeplasma-addons-4.5.3-1.fc13, kdesdk-4.5.3-3.fc13, kdetoys-4.5.3-1.fc13, kdeutils-4.5.3-1.fc13, oxygen-icon-theme-4.5.3-1.fc13, kde-l10n-4.5.3-1.fc13, kdegames-4.5.3-3.fc13, kdebase-runtime-4.5.3-3.fc13, kdepimlibs-4.5.3-2.fc13 has been pushed to the Fedora 13 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 8 Christian Jann 2010-11-19 17:10:25 UTC
OK, tested it tody on another machine where I haven't fixed it myself and the update works.


Note You need to log in before you can comment on or make changes to this bug.