LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Linux Mint
User Name
Password
Linux Mint This forum is for the discussion of Linux Mint.

Notices


Reply
  Search this Thread
Old 12-07-2011, 07:37 PM   #1
Thane
Member
 
Registered: Aug 2006
Location: Ontario,Canada
Distribution: Linux Mint19.3 Cinnamon 64bit
Posts: 223

Rep: Reputation: Disabled
Password not required for updating -- security vulnerability?


I'm presently running Mint 12 RC in virtualbox, as I'm looking for alternatives to ubuntu 11.10. I've been using ubuntu since Dapper or maybe earlier, so I'm used to being prompted for my password, when using update manager. It was therefore a bit of a surprise to find, that so far Mint hasn't demanded my password, when using Mint's password manager program.

I'm wondering if this method is normal for Mint installations. If it is, I assume not entering a password, must not be considered a security threat. Could someone explain the reasoning to me? I would have thought, not using the password would potentially give anyone with bad intentions and access a free shot at a Mint system. Cheers
 
Old 12-09-2011, 05:26 AM   #2
yooy
Senior Member
 
Registered: Dec 2009
Posts: 1,387

Rep: Reputation: 174Reputation: 174
updating is vital for secured sistem, that's why it's normal that password is not required.
 
Old 12-09-2011, 06:19 AM   #3
Thane
Member
 
Registered: Aug 2006
Location: Ontario,Canada
Distribution: Linux Mint19.3 Cinnamon 64bit
Posts: 223

Original Poster
Rep: Reputation: Disabled
Thanks for the reply Yooy. I do realize, that updating is vital. It seems though, that not requiring the password to install files, which modify the system, may lead to potential abuse by the more nefarious. Maybe I'm wrong in this.
 
Old 12-22-2011, 10:02 PM   #4
Thane
Member
 
Registered: Aug 2006
Location: Ontario,Canada
Distribution: Linux Mint19.3 Cinnamon 64bit
Posts: 223

Original Poster
Rep: Reputation: Disabled
Don't know if there was some kind of glitch in my Mint 12 RC instl'n, or if the password situation has been taken care of by an update. But I'm now being asked for a password, before checking for and installing updates. All good here. Solved.
 
Old 12-22-2011, 11:39 PM   #5
Telengard
Member
 
Registered: Apr 2007
Location: USA
Distribution: Kubuntu 8.04
Posts: 579
Blog Entries: 8

Rep: Reputation: 148Reputation: 148
It is normal for your credentials to be cached for a short time after authentication.

https://help.ubuntu.com/community/RootSudoTimeout

Not sure if this is related to what you are experiencing, but maybe.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
security vulnerability Malachai.77 Linux - Security 2 06-10-2006 12:12 AM
mailman security vulnerability? aquaboot Ubuntu 0 01-16-2006 07:40 PM
Firefox/Javascript security vulnerability...... BajaNick General 2 04-12-2005 09:22 AM
Security: Java plugin vulnerability!! peacebwitchu Linux - Security 0 11-25-2004 05:48 PM
OpenSSH - Major Security Vulnerability jeremy Linux - Security 9 06-27-2002 09:36 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Linux Mint

All times are GMT -5. The time now is 11:51 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration