Comment 5 for bug 154724

Revision history for this message
AaronPeterson (alpeterson) wrote :

So, basically we need to sudo proof our gui applications, because it's not obvious that we must use kdesudo.

Is this error message stays even when I've closed the sudo'ed application.
I hope it doesn't stay on next login.
-AP (Kubuntu 8.10)

and could this be a security problem? I mean, why would the cache normally be owned by user 0 (root)... and if it's owned by my user 1000, that means that if I leave it open for someone else to use they could put whatever they want into that cache... and if it gets ran with superuser privildges then we have an exploit.

This is like saying:
"safely run program x"
which has been in use for years and is standard, and then later learning that one must run

"pretty please safely run the program x"
which isn't given as a warning or anything when we run sudo.

Maybe making a complicated alias where if a program off of the list of gui programs is considered would work. that gives an error message that use of our common and hiddenly misunderstood sudo is deprecated.