David Zeuthen wrote:
> Anyway, the goal of PolicyKit isn't to fix the "cope with malware in
> your session" problem. That problem is much much harder to fix and it
> requires us to depart from the model where the whole user session is a
> single security context.
Then why does it prompt for authentication at all? It could just as well
just let the user do everything without a password, he/she's already
authenticated due to the login. Prompting for passwords again makes sense
to protect against malware, but what else? Users who left their desktop for
a while? It's their responsibility to lock the desktop.
Kevin Kofler
--
fedora-devel-list mailing list
fedora-devel-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-devel-list
