Local users get to play root?

[Seth Vidal]

On Wed, 18 Nov 2009, Matthew Miller wrote:

> On Wed, Nov 18, 2009 at 11:45:14AM -0800, Dan Williams wrote:
>> But that's not right because those files aren't config files.  Instead,
>> you drop "local authority" files in /var/lib/polkit-1/localauthority/
>> that override those permissions on a site-by-site basis for your
>> specific use-case, irregardless of what the defaults are.
>
> The config files live in /var?
>
> Really.

https://bugzilla.redhat.com/show_bug.cgi?id=538615

bug is already opened.

-sv