On Tue, Jan 20, 2009 at 10:03 AM, Craig White <craigwhite@xxxxxxxxxxx> wrote: > On Tue, 2009-01-20 at 09:53 -0800, Kam Leo wrote: >> On Tue, Jan 20, 2009 at 1:30 AM, Richard Hughes <hughsient@xxxxxxxxx> wrote: >> > On Mon, 2009-01-19 at 10:16 -0800, Kam Leo wrote: >> >> What's the difference whether the package got >> >> installed by root or via "su"? >> > >> > No difference. The difference is that if you're loading a GUI to do it, >> > you're running 500,000 lines of code as root in an untrusted >> > environment. >> > >> > Richard. >> >> Well, if you can not trust a GUI then logging in as a user won't help >> either. Once that user invokes superuser powers there is no difference >> between him/her and root. > ---- > I have no doubt that you actually believe that and I suspect that there > is little that I could say that would change your mind. > > Perhaps you should relate the study you have given to this concept to > convince us of your analysis. > > Craig It's the person in front of the keyboard/clicking mouse that makes the difference. Throwing in a requirement to log in as a user just delays the inevitable. -- fedora-list mailing list fedora-list@xxxxxxxxxx To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
