Local users get to play root?

Simo Sorce ssorce at redhat.com
Wed Nov 18 19:19:51 UTC 2009


On Wed, 2009-11-18 at 14:11 -0500, Colin Walters wrote:
> 
> I would agree with that, but it's not trivial.  Are we just scoping in
> PackageKit here, or also consolehelper @console actions?  Does it
> imply removing the setuid bit from /bin/ping?

It seem obvious we are talking only about this specific behavior of
PackageKit at the moment.

Now if it were at least *easy* to revert this behavior ...
Take a default F-12 and without much knowledge try to change it (like I
would want to do if I had kids).

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York




More information about the fedora-devel-list mailing list