early-gdm redux ( I am sorry my way is better faster... for a desktop )
alexl at redhat.com
Tue Sep 18 11:11:27 UTC 2007
On Tue, 2007-09-18 at 11:34 +0200, Thorsten Leemhuis wrote:
> On 18.09.2007 10:35, Alexander Larsson wrote:
> > 2) When important things in the desktop start requiring fuse everyone
> > will be in the fuse group anyway, meaning any security is lost.
> > (One could say this only happens on "desktop" machines, but if you
> > don't trust fuse userspace on your server, just don't install it
> > there.)
> No offense, but well, if "important things in the desktop start
> requiring fuse" I suppose people programming that stuff first make sure
> it's safe and wise to use fuse, as it might backfire to their apps if
> fuse is unsafe.
I had no idea that Fedora was doing this to its fuse packaging when
designing gvfs. I've looked into fuse a bit, and it seemed safe to me.
> It's likely nothing more then asking the Fedora developers "can we get
> rid of the add-to-a-specific-group stuff for fuse over the next few
> months? I want to use fuse for important things in the desktop" *before*
> starting to really depend on fuse.
More information about the Fedora-desktop-list