Re: Updates done by everyone

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Am Samstag, den 09.12.2006, 09:45 -0500 schrieb jim tate:
> Roger Grosswiler wrote:
> > i just asked myself, why a normal user shouldn't be able to run pup by
> > itself without root permission.
> >
> > I think, this could be an issue to configure in the future.
> >
> > Meanwhile, i entered a group as sudoers. In the shell, everybody on this
> > machine is now able to run pup. 
> >
> > I changed pup.desktop in /usr/share/applications 
> >
> > to Exec = sudo /usr/bin/pup
> >
> > ..it seems, gnome does not like this kind of entry ;) because i couldnt
> > then launch it from gnome no longer.
> >
> > does anybody know, how i could handle this without a  shellscript in
> > between?
> >
> > Thanks,
> > Roger
> >
> >   
> So you want Linux to have a security blanket like $Windows , so it will 
> make your life easier.
> BOY!! some of these ex $Windows users.
> 
> Jim
> 
> 
Erm, i was posting a question and get this answer? nice, nice, but is
there also a productive idea on my question? So, i see

1) an annoying flame again which is completely unnecessary, basing on
assumptions.

2) a question of usability

3) a question of security

4) a question of philosophy

i will not discuss point 1) or 4) each approach has its
advantages/disatvantages. you will leave even a insecure system if you
leave buggy apps unupdated. but this is point 4)

I agree it is a hole. But just to finalize my idea:

If the puplet says "xx security updates" i just want, that a normal user
can say "update now" - thats all!

what is against this? Even, it is helpful for security. Many admins
won't walk to 10 workstations for long time, so they a) commit the
password (...no discussion...) or resolve it via sudo :NOPASSWD or in
another, efficient way.

Thats the way i search too.

btw. how can you make sure even as admin, you get "proper" updates? If
you just allow updates and nothing else, the user will do your work for
lesser money in the same security-context, or am i false? 

So, if anybody feels free to discuss this issue in a friendly and
productive manner, you are welcome.

Roger


[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux