Local users get to play root?

Jesse Keating jkeating at redhat.com
Thu Nov 19 16:29:26 UTC 2009


On Thu, 2009-11-19 at 06:50 +0000, Keith G. Robertson-Turner wrote:
> 
> The desktop users on my network might have difficulty doing any of those
> things, since their "desktop" access is via VNC tunnelled through ssh.
> 
> However, now it seems they can arbitrarily install software into /usr,
> on a server that is (for some of them) in a foreign country, because of
> something called PackageKit. 

That is incorrect, unless somehow your ssh tunneled VNC registers as
"local console login", which I doubt.  In your case, none of your users
would be allowed to install software/updates.

-- 
Jesse Keating
Fedora -- Freedom² is a feature!
identi.ca: http://identi.ca/jkeating
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <http://listman.redhat.com/archives/fedora-devel-list/attachments/20091119/00fc0218/attachment.sig>


More information about the fedora-devel-list mailing list