On Mon, Nov 23, 2009 at 10:02 PM, James Morris <jmorris@xxxxxxxxx> wrote: > > > Possibly (it could simply be that an updated policy is weaker for some > reason) -- but it doesn't matter, there should be no way to change MAC > policy without MAC privilege. It'd be nice here if we had the ability to only grant the ability to install applications, not packages. We could possibly do this even now inside PackageKit by always downloading the filelists data, and looking for a .desktop file. It'd be even better if we could get at the data inside the .desktop file, but that's not necessary for this. That leaves aside the packagekit-command-not-found feature for unix binaries, but that's more of a technical use case. -- fedora-devel-list mailing list fedora-devel-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-devel-list
