Fedora 12 lets unprivileged users install packages
Posted Nov 19, 2009 9:48 UTC (Thu) by
epa (subscriber, #39769)
In reply to:
Fedora 12 lets unprivileged users install packages by dlang
Parent article:
Fedora 12 lets unprivileged users install packages
there are a LOT of packages out there that are extremely useful under some conditions, but under other conditions (and frequently with default configs) open up your system
Yes... clearly the philosophy of 'let the user install standard packages' is at odds with the philosophy 'do not install a daemon unless you intend to run it'. If the user has rights to install httpd, then the default must be not to start it.
However, that does seem to be the case in modern Fedora: server packages are installed not-starting by default and you must use chkconfig(1) or some other means to enable them.
Apart from servers that start by default or suid binaries, in principle there is no package that can open up the system, since the user could always compile and run the code himself.
(
Log in to post comments)