System-config Reworking Proposal

Lubomir Kundrak lkundrak at redhat.com
Mon Nov 19 21:39:54 UTC 2007


On Mon, 2007-11-19 at 20:40 +0530, Rahul Sundaram wrote:
> Lubomir Kundrak wrote:
> > On Mon, 2007-11-19 at 14:24 +0100, Thorsten Leemhuis wrote:
> >> On 19.11.2007 14:07, Lubomir Kundrak wrote:
> >>> On Mon, 2007-11-19 at 01:18 -0600, Arthur Pemberton wrote:
> >>>> Rework (not a total rewrite) system-config tools use a common virtual console which abstracts away local and remote console usage. Anticipated benefits:
> >>>>     * transparently handle local or remote console (via ssh)
> >>>>           o allow configuration of remote services
> >>> this is possible now:
> >>> ssh -X my.server system-config-httpd
> >> Wile at it: For me as heavy sudo user it does not work properly:
> >> https://bugzilla.redhat.com/show_bug.cgi?id=142648
> >> https://bugzilla.redhat.com/show_bug.cgi?id=164671
> > 
> > It can be fixed easily by dumping sudo.
> 
> What? Why would we be dumping sudo?

I'm not saying we are. It was just a good friendly advise. Other
question would be -- why use it? Only use that can't be replaced by
other existing (and better) tools is to give untrusted users access to
privileged tools that weren't designed in security with mind.

-- 
Lubomir Kundrak (Red Hat Security Response Team)




More information about the fedora-devel-list mailing list