Torvalds:requiring root password for mundane things is moronic

Sergio Pascual sergiopr at fis.ucm.es
Fri Mar 2 17:45:59 UTC 2012


Hi, regarding this problem (polkit asks you for the password of
another user), I have filled this bug report

https://bugzilla.redhat.com/show_bug.cgi?id=799480

I have hit this problem myself in several computers.

Regards, Sergio

2012/3/2 Greg Swift <xaeth at fedoraproject.org>:
> On Fri, Mar 2, 2012 at 05:36, Nikos Roussos <nikos at autoverse.net> wrote:
>>
>> Here is a weird example of how Fedora currenty handles some permission
>> procedures. I created a standard user account (no admin rights) and I'm
>> trying to install a package. When I press apply I'm prompted to enter a
>> password. Since I have no admin rights I would expect to be asked for the
>> root password. Instead of that I'm asked to enter a password of another user
>> who happens to be in the administrative group!
>>
>> See the screenshot as a proof:
>> http://s.autoverse.net/yYi6AF
>> See on the top right corner that I'm logged in with another account.
>>
>> So in the UX level we have actually disabled the root account (I can
>> remember when was the last time I was prompted to enter it) thus we keep
>> asking for a root password during installation that's ends up confusing
>> people about its purpose.
>>
>>
>> PS. an interesting question: if I had two users on my system belonging to
>> the administrative group. which one's password I'll be prompted to enter
>> when I'm logged with a standard user account, like the example above.
>>
>
> I experience a similar scenario.  On my home system (f16) I have my wife and
> both in the wheel group.  Every time I go to run virt-manager I get prompted
> for her password.  I do believe she is first in the wheel group after root
> in /etc/group.  However this doesn't make any sense to me.  It makes more
> sense for users that need that level of access to all know the root password
> rather than the users to know another user's password.  Even then, if I am
> in the same group, doesn't it make more since to either prompt for my own
> password or just allow me?  We know each others password so i've always
> shrugged it off cause I'm looking at other issues the few times when I am
> playing with the virtuals at home but since someone brought it up...
>
> -greg
>
> --
> devel mailing list
> devel at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/devel



-- 
Sergio Pascual     http://guaix.fis.ucm.es/~spr    +34 91 394 5018
gpg fingerprint: 5203 B42D 86A0 5649 410A F4AC A35F D465 F263 BCCC
Departamento de Astrofísica -- Universidad Complutense de Madrid (Spain)


More information about the devel mailing list