Local users get to play root?

Jeff Garzik jgarzik at pobox.com
Wed Nov 18 21:24:16 UTC 2009


Sorry, but this default (desktop users can install pkgs without root) is 
just stupid.  It is antithetical to all standard security models that 
have come before in Fedora and other Linux distributions.

Instead of shielding yourselves with silly arguments about the lack of 
lock-and-key on a desktop machine, ask yourself how many decades-old 
assumptions you are wiping in one fell swoop.  It's no excuse to give 
viruses, pranksters and other vectors easy access to Fedora.

Even Microsoft Windows asks for elevated privileges for this sort of thing!

This is just shameful.

	Jeff





More information about the fedora-devel-list mailing list