Re: clock riddle

[Michal Jaegermann <michal harddata com>]

On Mon, Feb 23, 2009 at 03:13:02PM -0500, Christopher Beland wrote:
> It looks like what short of authentication is required to change the
> system clock is now configurable in System -> Preferences ->
> Authorizations.

It is not a question how to change authorizations but that default
authorizations, i.e. what you will get on just installed system, are
seriously backwards defaulting to a security disaster.  Yes, you can
fix that using polkit-action, if you noticed that something is
amiss, but I wonder on how many installed systems this was actually
done and what else is lurking there.

The issue was reported at least on 2008-06-06 as
https://bugzilla.redhat.com/show_bug.cgi?id=450304

   Michal