on 9/21/2007 2:26 PM, Richi Plana wrote: > On Fri, 2007-09-21 at 14:18 -0400, jam@xxxxxxxxxxxxxxxxxxxx wrote: >> On Fri, Sep 21, 2007 at 11:33:53AM -0400, David Boles wrote: >>> To say it once more. >>> >>> I think it is a good thing to *not* allow, by default, root GUI logins. >>> Those that want to do that can enable it. Those that can not figure out >>> how to enable it probably should not be doing it anyway. >>> -- >>> >>> David >>> >> I agree. +1. > > I agree, as well. The important thing is for users to have access to GUI > applications that would allow them to do their admin work. A lot of that > is accomplished by accessing the same apps from System->Administration > and authenticating themselves, or "su -"'ing from a terminal and > executing X applications from there. They don't need a whole X session > to achieve their goal of administering the machine. > > If they really want an X session as root for other reasons, then they > can log on a console VT and "startx :1". > > But again, if root must be allowed to start an X session from gdm as > policy, then let it be a stripped down session. The stripped down session that you propose would be ok. But then you will start a 'flame' about just what this session should contain. ;-) -- David
Attachment:
signature.asc
Description: OpenPGP digital signature
-- fedora-devel-list mailing list fedora-devel-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-devel-list