[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: Local users get to play root?



On 11/18/2009 06:14 PM, Rahul Sundaram wrote:
On 11/18/2009 10:38 PM, nodata wrote:


"PackageKit allows you to install signed content from signed
repositories without a password by default. It only asks you to
authenticate if anything is unsigned or the signatures are wrong"

If you have a problem with this, do explain why.
a) It contradicts multi user working principles.
"Arbitrary console user" is able to kill the application his fellow worker, who is logged in from remote, is working with

b) What if an upgrade fails badly?

c) What if an upgrade requires a reboot.

Not suggesting it is
not a problem but being more descriptive does help.


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]