F21 System Wide Change: Workstation: Disable firewall

drago01 drago01 at gmail.com
Sun Apr 20 21:45:42 UTC 2014


On Sun, Apr 20, 2014 at 11:20 PM, Lars Seipel <lars.seipel at gmail.com> wrote:
> On Thu, Apr 17, 2014 at 11:44:58PM +0200, Miloslav Trmač wrote:
>> We don't, actually.  *Only* applications running in a session of a member
>> of the wheel group would have that right, and those applications are pretty
>> much root-equivalent anyway.  (Many GNOME users probably use such a setup,
>> but it's not at all the only one possible.)
>
> Ugh. This is implemented in PolicyKit? Where was this change
> discussed/announced and when did it happen? Reinterpreting wheel group
> membership to give user accounts mighty powers without requiring
> re-authentication is a pretty major change and probably unexpected for
> most users.

I can't recall when this happened but it was done to not have two ways
to define "user with more privileges"


More information about the devel mailing list