Subject: Re: bug#10010: "su" *should* check on SUID bit

From: Assaf Gordon <[email-masked]>
Date: Thu, 18 Oct 2018 19:44:52 -0600

close 10010
stop

(triaging old bugs)

Hello,

On 10/11/11 10:00 AM, Bob Proulx wrote:
> severity 10010 wishlist
> tags 10010 + confirmed
> 
> Michael Lenz wrote:
> 
>> Aaand I was unable to su to root, due to an "invalid password",
>> which was strange..
> 
> That does seem less than friendly and seems like it would be good to
> be improved.
> 

In the 7 years since this report, coreutils' su(1) was effectively
decommissioned, to be replaced by su implementation from other packages
(e.g. 'shadow' and 'util-linux').

As such, even though this is a confirmed deficiency, I'm closing the bug.
Discussion can continue by replying to this thread.

regards,
   -assaf