Re: low-hanging fruit

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



On 8/22/07, David Zeuthen <davidz@xxxxxxxxxx> wrote:
>
> On Wed, 2007-08-22 at 19:37 +0200, dragoran wrote:
> >
> >
> > On 8/22/07, David Zeuthen <davidz@xxxxxxxxxx> wrote:
> >
> >
> >         (Another technical tidbit: RPM's GPG keys are tied to the
> >         system so when
> >         one user is deciding to import a GPG (aka. start trusting a
> >         software
> >         provider) it affects all users on that. Maybe the dialog need
> >         to makes
> >         that clear too.)
> >
> > that is a reason for asking for the root password , everything else is
> > nothing but a security hole if  a non root user can set system
> > defaults like this.
>
> Yeah, it's probably a good idea to ask for an administrator to
> authenticate to do this. With mainline Fedora this would be asking for
> the root password; for other spins it might asking a user in e.g.
> 'wheel' to authenticate.
>

which reminds me.  wouldn't it make sense to at UGROUPS=wheel to our
/etc/security/console.apps/ files?  The functionality has been around
for years now
and never used because it was getting replaced.

Jon

-- 
Fedora-desktop-list mailing list
Fedora-desktop-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-desktop-list

[Index of Archives]     [Fedora Users]     [Fedora KDE]     [Fedora Announce]     [Fedora Docs]     [Fedora Config]     [PAM]     [Red Hat Development]     [Red Hat 9]     [Gimp]     [Yosemite News]

  Powered by Linux