Torvalds:requiring root password for mundane things is moronic

Daniel J Walsh dwalsh at redhat.com
Fri Mar 2 15:46:07 UTC 2012


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 03/02/2012 10:38 AM, Sérgio Basto wrote:
> On Thu, 2012-03-01 at 20:49 -0500, Daniel J Walsh wrote:
>> On 03/01/2012 05:43 PM, Adam Jackson wrote:
>>> On Thu, 2012-03-01 at 16:39 -0500, Daniel J Walsh wrote:
>>> 
>>>> I believe Fedora 17 has an add user to admin group checkbox
>>>> when adding the initial user, not sure if it is checked on or
>>>> off by default.
>>> 
>>> Off by default (having just tried it today).
>>> 
>>> - ajax
>>> 
>>> 
>>> 
>> Probably should default to on.
> 
> I prefer put one note like: "if your name is Linus , check it,
> please. " :)
> 
> 

Prompting for the password for a user in the wheel group, is just the
same as saying I am a human, to make sure an application can not cause
the privileged escalation.  If we had a mechanism called trusted path,
where we knew a human caused an action, then you would not need to ask
for the password.

Of course we have wanted trusted path for nearly 10 years ...

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk9Q6z8ACgkQrlYvE4MpobO/hACgk63+6jcvvFlTDb5kGVGsqx78
vQ8AoOBd2ICf58m2k20zCfUAwnAlNNhR
=vDef
-----END PGP SIGNATURE-----


More information about the devel mailing list