[Bug 1191474] Re: Security ROOT. Logs without requiring a password!!!

[Daniel Karlsson]

Thank you for taking the time to report this bug and helping to make
Ubuntu better. I see in your modified sudoers file that you have added
the line:

ALL ALL=(ALL) NOPASSWD:ALL

This line configures sudo so that no one will have to type any password
at all. Since this is the intended function of sudo I will close this
bug as Invalid. I would also suggest removing the two offending lines in
sudo. You can find more info on sudos behaviour at:

http://www.ducea.com/2006/06/18/linux-tips-password-usage-in-sudo-
passwd-nopasswd/

** Changed in: sudo (Ubuntu)
       Status: New => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to sudo in Ubuntu.
https://bugs.launchpad.net/bugs/1191474

Title:
  Security ROOT. Logs without requiring a password!!!

Status in “sudo” package in Ubuntu:
  Invalid

Bug description:
  a3 at a3:~$ ubuntu-bug
  a3 at a3:~$ ubuntu-bug
  a3 at a3:~$ sudo -i
  root at a3:~# ubuntu-bug
  root at a3:~# ubuntu-bug sudo
  opera: Activated running instance
  root at a3:~#

  ProblemType: Bug
  DistroRelease: Ubuntu 12.04
  Package: sudo 1.8.3p1-1ubuntu3.4
  ProcVersionSignature: Ubuntu 3.5.0-28.48~precise1-generic 3.5.7.9
  Uname: Linux 3.5.0-28-generic x86_64
  NonfreeKernelModules: nvidia
  ApportVersion: 2.0.1-0ubuntu17.2
  Architecture: amd64
  Date: Sun Jun 16 11:34:54 2013
  InstallationMedia: Ubuntu 12.04.2 LTS "Precise Pangolin" - Release amd64 (20130213)
  MarkForUpload: True
  SourcePackage: sudo
  UpgradeStatus: No upgrade log present (probably fresh install)
  VisudoCheck: /etc/sudoers: parsed OK
  mtime.conffile..etc.sudoers: 2013-06-12T08:01:02.006460

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/1191474/+subscriptions