Local users get to play root?

[Jon Ciesla]

Seth Vidal wrote:
>
>
> On Wed, 18 Nov 2009, Jon Ciesla wrote:
>
>> Seth Vidal wrote:
>>>
>>>
>>> On Wed, 18 Nov 2009, nodata wrote:
>>>
>>>>>>> -sv
>>>>>>>
>>>>>> I do if it's in the default DVD install, or was pulled in in an
>>>>>> upgrade. I've never intentionally installed it, and yes I do. Never
>>>>>> imagined it would be a problem. I'll remove it.
>>>>>>
>>>>>
>>>>> Maybe you and I have a different concept of 'Servers'. But I tend to
>>>>> install @core only and then remove items whenever I can for a server.
>>>>>
>>>>> If it is a bad day I'll install X b/c something requires it but for
>>>>> servers I try to avoid anything beside the barest minimal I can have.
>>>>>
>>>>> -sv
>>>>>
>>>>
>>>> Maybe you have a different concept of security, but I don't want 
>>>> any user on the server installing software, no matter what.
>>>
>>> right - which is why I wouldn't install PK on a server.
>>>
>>> yum doesn't allow users to install pkgs, only root.
>>>
>>> -sv
>>>
>> I just found PackageKit on a server that's never been anything but.  
>> It was installed fith FC-2, which IIRC is pre-PackageKit.  Does this 
>> mean it was pulled in by something else that no longer requires it?
>>
>
> Did you 'yum update' the box from fc-2 to whatever it is now? or how 
> did you get there?
>
> -sv
>
Yes, precisely, one release at a time.  Plan to do 12 in a few days.

-- 
in your fear, seek only peace
in your fear, seek only love

-d. bowie