F21 System Wide Change: Workstation: Disable firewall

Lars Seipel lars.seipel at gmail.com
Sun Apr 20 21:20:40 UTC 2014

On Thu, Apr 17, 2014 at 11:44:58PM +0200, Miloslav Trma─Ź wrote:
> We don't, actually.  *Only* applications running in a session of a member
> of the wheel group would have that right, and those applications are pretty
> much root-equivalent anyway.  (Many GNOME users probably use such a setup,
> but it's not at all the only one possible.)

Ugh. This is implemented in PolicyKit? Where was this change
discussed/announced and when did it happen? Reinterpreting wheel group
membership to give user accounts mighty powers without requiring
re-authentication is a pretty major change and probably unexpected for
most users.

More information about the devel mailing list