Re: F21 Self Contained Change: Security Policy In The Installer

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On Fri, Mar 14, 2014 at 07:45:53PM +0000, Matthew Garrett wrote:
> On Fri, Mar 14, 2014 at 03:41:30PM -0400, Eric H. Christensen wrote:
> > On Fri, Mar 14, 2014 at 07:31:55PM +0000, Matthew Garrett wrote:
> > > How does the average user make an informed decision about whether an 
> > > available security policy is appropriate for them?
> > 
> > I guess we'll have to describe the different policies and provide 
> > approprate documentation/education.  You know, pretty much how we get 
> > users to understand whether or not they should encrypt their hard 
> > drives or assign the first user as an administrator or anything else 
> > they do with their computer.
> 
> The failure mode of making the wrong choice regarding an encrypted 
> partition or the default user being an administrator involves the system 
> *continuing to work*. The failure mode of making the wrong choice 
> regarding security policy is that things you expect to work mysteriously 
> don't.

What exactly do you think would be done with one of these policies?  You seem to think that an incorrect choice will brick a system.

- -- Eric

- --------------------------------------------------
Eric "Sparks" Christensen
Fedora Project

sparks@xxxxxxxxxxxxxxxxx - sparks@xxxxxxxxxx
097C 82C3 52DF C64A 50C2  E3A3 8076 ABDE 024B B3D1
- --------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=2+tr
-----END PGP SIGNATURE-----
-- 
devel mailing list
devel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct





[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]
  Powered by Linux