On Wed, 2009-11-18 at 16:04 -0500, Steve Grubb wrote: > > The problem is the *Default* not the fact that you can consciously allow > > users to update without a password. > > And I wonder what the audit trail will show? Does it show which user installed > these packages? PK has it's own logging, it logs the user the API is running from there. But it doesn't set loginuid, so "yum history", auditd, SELinux, etc. don't know. -- James Antill - james@xxxxxxxxxxxxxxxxx http://yum.baseurl.org/wiki/releases http://yum.baseurl.org/wiki/whatsnew/3.2.25 http://yum.baseurl.org/wiki/YumMultipleMachineCaching -- fedora-devel-list mailing list fedora-devel-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-devel-list