I'd like to see the bunnies please.
I looked at the file's content in another virtual console instead of pressing cancel. It recursively changes the Dropbox folder and contents to be owned by me and allow read+write+search by me.
Some googling suggests this is what Dropbox does when it doesn't like the owner or permissions of any files in the Dropbox folder. It is very weird though. I assume you have dropbox installed? It is syncing correctly? Running
find /home/dullbananas/Dropbox/ ! -user 'dullbananas'will list any files in that folder that aren't owned by you.Assuming your userid is 1000 (likely but not guaranteed), running the script should be harmless and stop the password prompt from appearing until there is another file permission issue. Check your user id with
id -u 'dullbananas'.
Confirm that you looked in "/bin/sh/tmp/" and not "/bin/sh /tmp" (notice the single space ' ' after the 'h').Ignore my previous comment, I was incorrect. Apologies. I had thought it was malware trying to look like something else, and that the who thing quoted was the single command, and not a command and an argument/parameter.
/bin/sh is the shell binary. The other part of that string is the argument being passed to the shell. The whole thing looks sus.
That whole thing looks sus. Maybe you can copy the file by switching to another tty session when it asks for elevated permissions.
That whole thing looks very sketchy. Don't execute the arbitrary shell scripts as superuser.
I don't have a Fedora box to check for sure, but have a look in
/var/log/secure, it might have details of the request and what program called it.
