Fedora 12 Lets Users Install Signed Packages, Sans Root Privileges

By +Frank B.
in Back Page News

 Share

Recommended Posts

Grand Master

+Frank B. Subscriber²

Posted
  • Subscriber²
Posted

Fedora 12 Lets Users Install Signed Packages, Sans Root Privileges

The new default policy for Fedora 12 allows local, unprivileged users to install signed packages without root access. This change apparently went mostly unnoticed until after the Fedora 12 GA release, at which point it sparked a mailing list thread that is, as of this writing, over 100 posts long.

souricon.gif News source: Slashdot

linkicon.gif Link: Bugzilla entry for the feature (bug?)

linkicon.gif Link: Fedora Mailing List Thread

Making this the default setting without even mentioning it in the Fedora 12 release notes was a really bad idea in my opinion. From a system administrator's point of view at least users being able to install packages == bad idea.

Grand Master

markwolfe Veteran

Posted
  • Veteran
Posted

I don't agree with this change. I like my default users unprivileged.

I suppose this makes things easier for home users, but more difficult to administer in a true multi-user environment.

Grand Master

fhpuqrgrpgvirzhpujbj

Posted
Posted
I don't agree with this change. I like my default users unprivileged.

I suppose this makes things easier for home users, but more difficult to administer in a true multi-user environment.

I don't use Linux, but if its anything like Windows with account management couldn't you change this pretty easily?

Grand Master

+Frank B. Subscriber²

Posted
  • Author
  • Subscriber²
Posted
I don't use Linux, but if its anything like Windows with account management couldn't you change this pretty easily?

You can change the setting, sure. The problem most people have with it is that the Fedora Project decided to make it the default setting when it should be an opt-in setting.

Veteran

CelticWhisper

Posted
Posted

Hopefully they'll realize this and include an option at install time to configure it this way or leave it secure. Maybe alongside the SELinux setup options?

Grand Master

markwolfe Veteran

Posted
  • Veteran
Posted
Define "install". It's pretty much possible to "install" any software that doesn't require admin permissions to run.

Anything that is system in scope, or pan-user would be "install".

yum install celestia should fail to install unless you are an admin, or have been explicitly given install privileges by an admin.

No one is stopping a user from putting executables in his/her own home and running them. Worst case is they trash their own home directory. No big deal.

This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.

  • Posts

    • Windows 11's big performance boost is finally available for all

      By ikjadoon · Posted

      It is silly there is no simple way to check whether this profile has been activated. CFRs are normal, but trying to even hide the fact if it's on / off seems silly, especially for something so user-facing. Surely Microsoft is "proud" of their engineering efforts on this one and ought to display it somwhere in the GUI.
    • Windows 11's big performance boost is finally available for all

      By ikjadoon · Posted

      Many Linux distros are not known for excellent battery life, so I'm not sure that is the best example. A more apt example may be Apple, but Apple's CPUs are simply far more efficient than Intel & AMD at single-threaded tasks like these, so "boosting" is not as power-hungry and less heat-inducing. Not to mention Apple will hardly engage P-cores for basic UI tasks; they use a pretty complicated QoS scheme to only activate P-cores for more serious workloads like HTML / JS execution or decompression or application launch. Microsoft is (smartly) doing it for launch, but also for UI tasks, which is the more nonsensical part: why ... do Windows 11's UIs need modern CPUs to boost? It should load so quickly that there's not even time for the CPU to boost.
    • Windows 11's big performance boost is finally available for all

      By ikjadoon · Posted

      I've not seen any controlled testing and, judging by Microsoft's mentality, within a year, they'll have added so much more bloat, it'll undo any perceptible latency benefit and we'll have boosted the CPU clocks for nothing.
    • Windows 11's big performance boost is finally available for all

      By ikjadoon · Posted

      It depends: heat soak is a thing. Initially on cold boot-up, the heatsinks & heatpipes are at ambient temp. After heatsinks & heatpipes warm up (through normal usage), they don't immediately cool to ambient temp when the load goes away. So their baseline is higher and the trigger point for fans is much less stress. Add a few more CPU spikes → it's too hot to stay at the same fan RPM → fans get triggered to start up up much sooner / get triggered to ramp much more quickly.
    • Euro-Office must default to ODF to be considered "genuinely European", LibreOffice argues

      By Danielx64 · Posted

      Can LibreOffice just shut up and worry about themselves and stop comparing themselves? Do we see Microsoft complaining about euro office?

  • Recent Achievements

    • One Year In
      slackerzz earned a badge
      One Year In
    • One Year In
      highriskpaym earned a badge
      One Year In
    • One Month Later
      highriskpaym earned a badge
      One Month Later
    • Week One Done
      highriskpaym earned a badge
      Week One Done
    • Week One Done
      FBSPL earned a badge
      Week One Done

  • Popular Contributors

    1. 1
      +primortal
      501
    2. 2
      PsYcHoKiLLa
      198
    3. 3
      +Edouard
      156
    4. 4
      Steven P.
      84
    5. 5
      ATLien_0
      71
    Show More

  • Tell a friend

    Love Neowin? Tell a friend!