[Bug 84224] able to change root pass without confirming old pass

[Gordon Sinclair]

Public bug reported:

On the USER/GROUPS menu...I was able to change the root password. It did
not ask for any password when entering this menu. It did not ask for the
old root password before allowing the change. I went there to count the
letters to try and jog my memory, as I'd forgot......couldn't and tried
changing it, expecting to be thwarted.

Since I'd forgotten the root password, I was in my normal user account
when accessing the USERS/GROUPS menu, I never got asked for a password.
When looking through the packages available in the package manager, it
never asked for any passwords either.....in the IRC channel they suggest
it maybe a sudo issue.

I am now able to log in to root via a command line with the new root
password...I still can't remember the old root password. I am using
Ubuntu 6.10 Edgy, dual booting (for now) with XP Pro SP1. I enabled the
root account in order to su into it. Every other Linux I've played with
uses su instead of sudo and to my logic its safer....in the #ubuntu irc
channel I've found out sudo is better...I am learning lol.

I am a new convert to Linux, and learning. I am happy to help contribute
where I can...this is the first bug I've found or reported. Any further
questions, please email me.....until I get my new modem running with
Ubuntu, I can only get online with XP Pro so I cant do live "tests"
online yet.

** Affects: control-center (Ubuntu)
     Importance: Undecided
         Status: Needs Info

-- 
able to change root pass without confirming old pass
https://launchpad.net/bugs/84224