Local users get to play root?

Kevin Kofler kevin.kofler at chello.at
Thu Nov 19 03:20:26 UTC 2009


Bruno Wolff III wrote:
> I don't like the idea of packages being installed meaning I want them to
> run services, schedule cron jobs or give elevated access by default. This
> kind of thing makes it easy to shoot yourself in the foot. The purpose of
> not installing packages should be to save disk space and resources needed
> for updates, not security and integrity.

And the very ironic thing about all this is that the very proposed 
"solution" ("don't install package XYZ if you don't want the reduced 
security that comes with it") is exactly why this very "feature" is such a 
bad idea!

        Kevin Kofler




More information about the fedora-devel-list mailing list