Complexity eats kittens alive!!!
Posted Nov 24, 2009 15:53 UTC (Tue) by dskoll
In reply to: Complexity eats kittens alive!!!
Parent article: Fedora 12 to remove unprivileged package installation
don't you see how that level of granularity might be just a _tad_ welcome to your average admin?
No, not really. Explain what the difference between "a device" and "a system-internal device" is. What, exactly, are you allowed to do if you are allowed to "Modify a device"? What does "Cancel a job initiated by another user" mean? Kill someone's process? Stop an "at" or "cron" job?
We see here creeping Microsoftisms. Vaguely-defined actions (described in dumbed-down, imprecise language) that are supposedly security-critical, so the average admin is completely confused as to what he or she should allow. This is a real step backwards.
to post comments)