clock riddle

[Adam Williamson]

On Tue, 2009-02-24 at 10:48 -0430, Patrick O'Callaghan wrote:

> AFAIK you can only change the system timezone via the root password.
> Again, this is KDE. I've no idea what Gnome does. Obviously if it allows
> a change like this without authentication then it's broken, but of
> course it wouldn't be able to do it if the system didn't let it.

GNOME is doing it the 'right way' by devolving authentication to
PolicyKit; this is the model for PK usage. The problem here is the
default policy in PK. Presumably whoever wrote it thought that
maliciously changing the system clock couldn't cause any problems. I'd
love to know who that was...
-- 
Adam Williamson
Fedora QA Community Monkey
IRC: adamw | Fedora Talk: adamwill AT fedoraproject DOT org
http://www.happyassassin.net