FS#10305 - [system-tools-backends] grants all users access

Attached to Project: Community Packages
Opened by Hyperair (hyperair) - Monday, 28 April 2008, 11:26 GMT
Last edited by Ionut Biru (wonder) - Monday, 10 August 2009, 12:46 GMT
Task Type Bug Report
Category
Status Closed
Assigned To Hugo Doria (hdoria)
Architecture All
Severity High
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 1
Private No

Details

Description:
When stbd is started, all users, regardless of group, are granted access to administrate the system.

Additional info:
* stbd is started when a gnome-system-tools program is run as root.
* gnome-system-tools programs cannot run without stbd running.
* system-tools-backend is at version 2.6.0-2.
* gnome-system-tools is at version 2.22.0-2.


Steps to reproduce:
1. Start a gnome-system-tools program as root, e.g. users-admin.
2. Close it.
3. Start a gnome-system-tools program as a normal user (doesn't matter who), e.g. users-admin.
4. Access is granted.
This task depends upon

Closed by  Ionut Biru (wonder)
Monday, 10 August 2009, 12:46 GMT
Reason for closing:  Fixed
Additional comments about closing:  2.6.1-1 reopen if needed
Comment by Hugo Doria (hdoria) - Monday, 05 May 2008, 11:27 GMT
That is strange. I am going to take a look at it. Any suggestions?
Comment by Babets (Babets) - Wednesday, 25 June 2008, 15:58 GMT
I confirm this bug. If a user want to use users-admin and all the programs in this package, he must add himself to stb-admin group but as Hyperair said, he have the power to use "user-admin" to add or delete all the users and groups.
If he does not add himself to the "stb-admin" this problem is not present but he cannot share folders via "shares-admin" or with nautilus (right-click -> shares-folder) and the little hand in the icon that show that a folder is shared does not appear.
I remember that this package works well when i was in ubuntu maybe we can use a patch of the ubuntu package (http://packages.ubuntu.com/hardy/system-tools-backends), the user must insert the password to share folder (maybe it is better to allow users to allow folders without password) or to add/remove users.
Sorry for my bad english. I hope my comment will be useful.

Loading...