LWN.net Logo

Fedora 12 lets unprivileged users install packages

Fedora 12 lets unprivileged users install packages

Posted Nov 19, 2009 1:23 UTC (Thu) by hadess (subscriber, #24252)
In reply to: Fedora 12 lets unprivileged users install packages by cmccabe
Parent article: Fedora 12 lets unprivileged users install packages

Except that remote users aren't allowed to install packages. You can probably think of a nice beat-down for the rest
of your rant for yourself.


(Log in to post comments)

Fedora 12 lets unprivileged users install packages

Posted Nov 19, 2009 3:41 UTC (Thu) by jgarzik (subscriber, #8364) [Link]

That holds true only until the next Web browser bug is found (or pick your own remote user-level exploit -- web browsers are merely the most common attack vector, not the only one).

Fedora 12 lets unprivileged users install packages

Posted Nov 19, 2009 6:49 UTC (Thu) by bojan (subscriber, #14302) [Link]

Exactly. This is madness. If someone is brave enough to _enable_ this kind of stuff on their machine, that's OK. But shipping this as a default is nuts.

PS. Speaking as a long time user of Fedora.

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds