Concept BUG, i think.
Daniel Robitaille
robitaille at gmail.com
Sun Apr 17 06:49:17 UTC 2005
> I believe I found a bug, but before posting useless things to bugzilla I
> want to see if anyone else has had this problem.
>
> Programs that use gsudo, or what ever it is called, like the update
> system take control of the screen and allow no input at all. Well you
> enter your password and re-gain control of the desktop. Easy right?
> Well lets say I browse to a website that pops up an "accept-ssl-cert"
> window, after clicking on the update manager.
>
> What happens is the accept-ssl window gets focus, but the gsudo prevents
> input to change the focus back to it, more-or-less locking up the desktop.
>
> Any insight, design flaw, bugzilla?
the grabing the focus by gksudo is a security feature. If you get
that prompt from gksudo to enter your password, the command will try
to take over your keyboard, mouse and focus, and will only let them go
after you are done typing your password in that password window.
If you do "man gksudo", you will see that there is a command line
option to disable it. It is also tweakable via the option
"disable-grab" in /etc/gksu.conf. That configuration file also has a
little explaination about all this:
# This option will have gksu avoid grabing the screen - this means
# it will not get exclusive use of your mouse and keyboard, so
# malicious X11 clients may be able to eavesdrop your password while
# you type it. It will not block your X11 session, though. Default
# is no, so gksu will normally try to do the grab.
#
disable-grab = no
More information about the ubuntu-users
mailing list