Do you think this is a security risk and if not is it a bad UI decision?

[Eric Sandeen]

On 5/3/13 11:30 PM, Matthew Garrett wrote:
> On Fri, May 03, 2013 at 11:24:01PM -0500, Eric Sandeen wrote:
>> On 5/3/13 10:58 PM, Matthew Garrett wrote:
>>> No, this isn't the most appropriate mailing list for the discussion - 
>>> anaconda-devel-list is a better choice if you want to interact with the 
>>> people who actually work on that code. In any case, I was disagreeing 
>>> with Rahul's assertion that he was justified in re-opening a bug merely 
>>> because he disagreed with a design choice.
>>
>> Matthew, with all due respect the tone of the bug doesn't make me think
>> that there is a lot of interest in discussion from the developers.
> 
> Reopening bugs is generally a good way of ensuring that there's even 
> less interest in discussion from the developers, and posting to mailing 
> lists that most of the developers concerned don't read has pretty 
> obvious problems in terms of changing their minds.

Fair enough, I hadn't looked closely at the timeline on the bug
history.

>> If this had been on the anaconda list, most impacted parties would
>> not have seen it.  Speaking for myself, I'm glad it was brought up here.
> 
> I think making people aware of it on devel was a perfectly reasonable 
> thing to do, but most of the rest of the thread has been pretty 
> pointless. We don't make technical decisions by majority vote - most get 
> left up to the maintainers of the project in question.

Well, that bears some scrutiny, IMHO.

Anaconda has a pretty special place in this project.  It is the
uber-administrator of every new Fedora install.  We would do better
as a community to hash out major changes before they're made, and
try to reach some agreement before we implement them.

For example, the choice of the default fs ultimately is implemented
in Anaconda, but I'm pretty sure the change wouldn't be made without
wider discussion.  

Maybe the question is this: How much of the Anaconda team's job is
it to set Fedora OS policies and behaviors, vs. to implement them?

-Eric