Local users get to play root?

[Jeff Spaleta]

On Wed, Nov 18, 2009 at 10:45 AM, Dan Williams <dcbw at redhat.com> wrote:
> But that's not right because those files aren't config files.  Instead,
> you drop "local authority" files in /var/lib/polkit-1/localauthority/
> that override those permissions on a site-by-site basis for your
> specific use-case, irregardless of what the defaults are.

Beyond the issue of what is and what is not the appropriate default at
install time..which is already a difficult issue to talk through.  I
think there is an education gap here about how to competently admin
PolicyKit based activities which adds frustration.

-jef"old dogs...new tricks"spaleta