| |||||||||||||
sudo = 1st account can subvert whole systemsudo = 1st account can subvert whole systemPosted Dec 18, 2008 21:02 UTC (Thu) by dlang (✭ supporter ✭, #313)In reply to: sudo = 1st account can subvert whole system by jspaleta Parent article: Instructions from Fedora on fixing the dbus problem
reading the policy kit link, it doesn't look like that comes close to solving the problem.
it is a toolkit to allow GUI programs to be segmented into privilaged and unprivilaged parts and standardize the communication between them.
this approach only works if someone re-writes everything that needs to be done as a privilaged user into a client-server GUI tool.
when you need to fix the GUI stuff, or do things not covered by it, you still need to go back and use sudo (or equivalent) to run the commands.
besides which, even if you have PolicyKit fully implmented, if the user is allowed to do everything then you have the same problem as sudo, if they aren't you still need some other way to do the stuff, so what do you do?
(Log in to post comments)
|
|||||||||||||