low-hanging fruit

David Zeuthen davidz at redhat.com
Wed Aug 22 17:49:44 UTC 2007


On Wed, 2007-08-22 at 13:47 -0400, Jon Nettleton wrote:
> which reminds me.  wouldn't it make sense to at UGROUPS=wheel to our
> /etc/security/console.apps/ files?  The functionality has been around
> for years now
> and never used because it was getting replaced.

I'd much rather see us stop shipping X11 applications that run as root
and, for that matter, consolehelper too. At least in the default
install. 

(That said, I've been toying around with writing a consolehelper
replacement using PolicyKit; it's not a lot of work and the immediate
benefit is that you can use the /etc/PolicyKit/PolicyKit.conf mechanism
to control access; the most immediate benefit being the
"fire-and-forget" feature that you get with the remember authorization
check boxes.)

    David





More information about the desktop mailing list