Fedora 12 lets unprivileged users install packages
Posted Nov 19, 2009 23:38 UTC (Thu) by
drag (subscriber, #31333)
In reply to:
Fedora 12 lets unprivileged users install packages by abadidea
Parent article:
Fedora 12 lets unprivileged users install packages
"""I'm a CS student in charge of managing the workstations around here,
some of which are Linux. And my reaction to this is: "WAT.""""
Policykit is designed specifically to help administrators add or deny
privileges to users based on easy-to-port configurations. Right now you'll
need a configuration engine to manage it properly, but in the future they
will be configurable via LDAP.
Think about the ability to apply 'group policies' in a way that is similar
to what Active Directory users are able to do.
"""
Now it happens that I don't run Fedora on anything, but I *know* that a lot
of admins of Linux workstations out there are not even gonna realize this
is enabled till it bites them somehow. It totally goes against the
principle of least surprise, as it's not expected behavior at all."""
Yes. Fedora screwed up by not making this change more apparent. That is a
bad move. But this is the point of using fedora... users and developers are
given the freedom to play around. This is part of what makes Fedora
desirable.. people are able to get access to cutting-edge Linux features
and functionality. This is just one of a hundreds unmentioned changes that
happenned between F11 and F12.
If you want predictability stick to something that is designed to be
predictable.. (Debian Stable, Ubuntu LTS, CentOS, Redhat, etc).
Without a doubt this feature WILL be in other distros after it's been given
a bit more time to have the issues ironed out and people have become
comfortable with the concepts and policies being introduced.
(
Log in to post comments)
