View Full Version : [ubuntu] Is an "Open as Root" launcher a serious hazard?
TheMaxzilla
September 7th, 2008, 02:55 PM
I was showing this (http://ubuntuforums.org/showthread.php?t=24008&page=1) page to a friend, and he said that it was a serious security hazard. Can someone tell me if it actually is or not, and why it would be?
lukjad007
September 7th, 2008, 03:09 PM
I haven't tried it but here is a (possible) reason why this is not good. If it doesn't require a password every time you drag 'n' drop something in it, then there is a potential security risk since anyone, or any program could then access the critical files in your computer. However, I think that there will be a password prompt for this launcher. If there is, I see not real security risk, especially since it was a well respected Ubuntu Member.
lukjad007
September 7th, 2008, 03:23 PM
I just tried it and it does ask for the root password. It still doesn't open anything, but I wouldn't worry about it too much. I just wouldn't install it, it isn't useful, at least to me.
mister_pink
September 7th, 2008, 03:38 PM
There's no security risk at all as far as I can tell. Its exactly the same as going and typing something on the command line with "sudo", gnome-open is just a program that will automatically decide what program to use to open the file. It will ask for your password just as often as normal sudo-ing (ie will remember it for 15 minutes.)
Oldsoldier2003
September 7th, 2008, 04:59 PM
It's no more dangerous than using sudo.
Random, unthinking use of sudo ( regardless of how you invoke it ) is the real hazard.
TheMaxzilla
September 8th, 2008, 07:15 PM
Okay, thanks then.
lukjad007
September 8th, 2008, 07:21 PM
Does it work for anyone else? It doesn't seem to work for me.
vBulletin® v3.8.4, Copyright ©2000-2012, Jelsoft Enterprises Ltd.