admin backend allows to edit root's files without prompting for password
Environment: archlinux with lightdm + i3. That's important that there is no policykit agents installed (or running), in my case the only policykit-related package is policykit. Policykit configuration is untouched, my user is in group wheel (that's important).
(UPD: If you have policykit graphical agent running, you should kill it before the following steps.)
- Open terminal
- It will open this directory/file without prompting for password.
- Both file/directory will be editable. For example, you can add any user to the sudoers file.
This link can be interesting: https://bugzilla.redhat.com/show_bug.cgi?id=1274451#c27
Expected behavior in this situation (when no agents are installed or running) is to display error message, but not grant superuser rights.