Security issue: gksudo doesn't ask for password

view story

http://crunchbang.org – ^ I think k40s means that, during that brief period while Conky and Tint2 are loading, gksudo can launch applications as root without an initial dialog requesting the sudoers password.  If this is indeed the case, then I think this does represent a vulnerability that can potentially be exploited by malicious software. (HowTos)