You are not logged in.
so i am new to the desktop environment thing (i was a long time openbox user). so far gnome is next to the cleansest thing i have ever seen, i love it.
now, i have noticed that if you ask gnome-system-monitor to 'end a process' it seems like it switches the user under which the program runs to root, and then kills it.
i am not logged in as root, nor is system-monitor running as root -- how is this possible?
is this not a very large vulnerability?
those who use gnome -- try it, end a process in the monitor, and watch the user of the process to change from 'user'(whatever your user name is) to root, and then end.
somebody set me strait please.
EDIT: sudo is not installed either
Offline
gnome-system-monitor uses libgnomesu for this. It's a library that does the same things as sudo does.
Offline
good to know
Offline