LWN.net Logo

Fedora 12 lets unprivileged users install packages

Fedora 12 lets unprivileged users install packages

Posted Nov 19, 2009 1:09 UTC (Thu) by cmccabe (guest, #60281)
Parent article: Fedora 12 lets unprivileged users install packages

Wow. Totally absurd. Apparently you can't remove software this way either, only add it.

The comments are also pretty crazy too. David Zeuthen compares this to automounting storage devices. Hello? Automounting storage devices only happens when I am in the same room as the computer, inserting a new storage device.

So far I haven't seen a single user who asked for this, or thinks it's a good idea. Apparently it's time to forget about using "desktop" spins of Fedora. What's particularly sad is that security is one of the areas where Fedora still has an advantage over Ubuntu.

C.


(Log in to post comments)

Fedora 12 lets unprivileged users install packages

Posted Nov 19, 2009 1:23 UTC (Thu) by hadess (subscriber, #24252) [Link]

Except that remote users aren't allowed to install packages. You can probably think of a nice beat-down for the rest
of your rant for yourself.

Fedora 12 lets unprivileged users install packages

Posted Nov 19, 2009 3:41 UTC (Thu) by jgarzik (subscriber, #8364) [Link]

That holds true only until the next Web browser bug is found (or pick your own remote user-level exploit -- web browsers are merely the most common attack vector, not the only one).

Fedora 12 lets unprivileged users install packages

Posted Nov 19, 2009 6:49 UTC (Thu) by bojan (subscriber, #14302) [Link]

Exactly. This is madness. If someone is brave enough to _enable_ this kind of stuff on their machine, that's OK. But shipping this as a default is nuts.

PS. Speaking as a long time user of Fedora.

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds