gksudo potentially very insecure
Trent Lloyd
lathiat at bur.st
Wed Jul 6 03:33:27 CDT 2005
On Wed, Jul 06, 2005 at 09:16:18AM +0200, ?ivind Hoel wrote:
<snip>
> IMO, a "key" icon in the notification area is all it takes - with the
> mandatory option of timing out NOW. I don't want an annoying box
> popping up asking for my password every time I want to feel powerful
> (why do we all have our popup blockers on in our browsers, again?). I
> just want to be able to tell that my last superuser-instance is still
> active in a non-obtrusive way.
Fedora has this, perhaps its worth looking into?
I think it's a good idea.
Trent
> Ofcourse, a popup (with prefilled password) during the timeout period
> could potentially stop malicious scripts from doing any unintended
> damage, but personally, I see this as a huge annoyance. At least have
> an option in the new notification area application to enable/disable
> this if you guys deem it necessary, please.
>
> Using a different colour for the popup title is probably not supported
> by metacity/gtk, right?
>
> On 7/6/05, Wouter Stomp <wouterstomp at gmail.com> wrote:
> > > Wouldn't it be better to give another color to the window title bar
> > > and/or border of programs that are running with root privileges?
> > >
> > > --
> > > JanC
> >
> > Don't think so:
> >
> > - Probably hard to do with all the different themes out there.
> > - Not obvious what it means if you don't know, at least an icon could
> > give information when the mouse is over it or when it is clicked
> >
> > But I still think it needs a dialog making it really clear what you are doing.
> >
> > Wouter
> >
> > --
> > ubuntu-devel mailing list
> > ubuntu-devel at lists.ubuntu.com
> > http://lists.ubuntu.com/mailman/listinfo/ubuntu-devel
> >
>
> --
> ubuntu-devel mailing list
> ubuntu-devel at lists.ubuntu.com
> http://lists.ubuntu.com/mailman/listinfo/ubuntu-devel
--
Trent Lloyd <lathiat at bur.st>
Bur.st Networking Inc.
More information about the ubuntu-devel
mailing list