FS#17797 - [sudo] does not ask for sudo password

Attached to Project: Arch Linux
Opened by M. Demirci (demirci) - Monday, 11 January 2010, 22:48 GMT
Last edited by Allan McRae (Allan) - Wednesday, 20 January 2010, 07:27 GMT
Task Type Bug Report
Category Packages: Core
Status Closed
Assigned To No-one
Architecture All
Severity Low
Priority Normal
Reported Version 2009.08
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

I did not install any X server. Just the text interface.

Login tty1 as root.

Login tty2 as another user. (normal user, created before)

Now when I sudo, it does not ask for password!
If I use sudo after some time, then it asks.

May be a security problem?
This task depends upon

Closed by  Allan McRae (Allan)
Wednesday, 20 January 2010, 07:27 GMT
Reason for closing:  Not a bug
Additional comments about closing:  default sudo behaviour
Comment by Allan McRae (Allan) - Monday, 11 January 2010, 23:06 GMT
The timeout for asking the password in sudo does not expire with a reboot. Are you running into that?
Comment by M. Demirci (demirci) - Tuesday, 12 January 2010, 13:52 GMT
In Ubuntu, if you open a new terminal, and sudo, you have to enter password, even if you have entered password in another terminal in the last 15 minutes. I think this is the best. In Archlinux, if you open a new terminal, and if you have entered sudo in another terminal a few minutes earlier, you dont have to enter password. I think this is a bad idea. If you can clarify this point I will be grateful.
Comment by Allan McRae (Allan) - Tuesday, 12 January 2010, 14:05 GMT
Arch uses the default sudo behaviour. Feel free to configure it how you would like on your system.
Comment by Thomas Dziedzic (tomd123) - Thursday, 14 January 2010, 00:42 GMT
I also wondered about this. If this is the default behavior for sudo, as Allan said, then I think we should keep it. After all, arch is no openbsd :)

Loading...