Embed Notice

I think I found a security bug in Linux Mint.

Install Linux Mint 22 (Cinnamon) with password requirement to sign in. Using the GUI have Mint update. Reboot. Confirm that you need a password to use sudo (you do).

In the "start menu" (app menu), open "Users and Groups" and create another administrator. Note there is no option to require password sign in, but that is not the greater issue.

Log out, log in as your new user. Open "Users and Groups" again. Delete the 1st user. Reboot.

Guess what, you never need a password, ever again. You can right click and run as root anytime you want, you can run sudo anytime you feel like it. No passwords or prompt warning you of your actions. Install any random DEB file without any prompt.

You're basically root.

#Linux #Mint #LinuxMint #Security