Local users get to play root?

[Seth Vidal]

On Wed, 18 Nov 2009, nodata wrote:

>>>> -sv
>>>> 
>>> I do if it's in the default DVD install, or was pulled in in an
>>> upgrade. I've never intentionally installed it, and yes I do. Never
>>> imagined it would be a problem. I'll remove it.
>>> 
>> 
>> Maybe you and I have a different concept of 'Servers'. But I tend to
>> install @core only and then remove items whenever I can for a server.
>> 
>> If it is a bad day I'll install X b/c something requires it but for
>> servers I try to avoid anything beside the barest minimal I can have.
>> 
>> -sv
>> 
>
> Maybe you have a different concept of security, but I don't want any user on 
> the server installing software, no matter what.

right - which is why I wouldn't install PK on a server.

yum doesn't allow users to install pkgs, only root.

-sv