diff options
Diffstat (limited to 'zarb-ml/mageia-discuss/20120208/006425.html')
| -rw-r--r-- | zarb-ml/mageia-discuss/20120208/006425.html | 97 |
1 files changed, 97 insertions, 0 deletions
diff --git a/zarb-ml/mageia-discuss/20120208/006425.html b/zarb-ml/mageia-discuss/20120208/006425.html new file mode 100644 index 000000000..d1db73e4b --- /dev/null +++ b/zarb-ml/mageia-discuss/20120208/006425.html @@ -0,0 +1,97 @@ +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> +<HTML> + <HEAD> + <TITLE> [Mageia-discuss] A possible risk ? + </TITLE> + <LINK REL="Index" HREF="index.html" > + <LINK REL="made" HREF="mailto:mageia-discuss%40mageia.org?Subject=Re%3A%20%5BMageia-discuss%5D%20A%20possible%20risk%20%3F&In-Reply-To=%3C1328704501.2207.29.camel%40liliana.cdg.redhat.com%3E"> + <META NAME="robots" CONTENT="index,nofollow"> + <META http-equiv="Content-Type" content="text/html; charset=us-ascii"> + <LINK REL="Previous" HREF="006454.html"> + <LINK REL="Next" HREF="006426.html"> + </HEAD> + <BODY BGCOLOR="#ffffff"> + <H1>[Mageia-discuss] A possible risk ?</H1> + <B>Michael Scherer</B> + <A HREF="mailto:mageia-discuss%40mageia.org?Subject=Re%3A%20%5BMageia-discuss%5D%20A%20possible%20risk%20%3F&In-Reply-To=%3C1328704501.2207.29.camel%40liliana.cdg.redhat.com%3E" + TITLE="[Mageia-discuss] A possible risk ?">misc at zarb.org + </A><BR> + <I>Wed Feb 8 13:35:01 CET 2012</I> + <P><UL> + <LI>Previous message: <A HREF="006454.html">[Mageia-discuss] A possible risk ? +</A></li> + <LI>Next message: <A HREF="006426.html">[Mageia-discuss] A possible risk ? +</A></li> + <LI> <B>Messages sorted by:</B> + <a href="date.html#6425">[ date ]</a> + <a href="thread.html#6425">[ thread ]</a> + <a href="subject.html#6425">[ subject ]</a> + <a href="author.html#6425">[ author ]</a> + </LI> + </UL> + <HR> +<!--beginarticle--> +<PRE>Le mercredi 08 février 2012 à 08:47 -0300, Renaud (Ron) Olgiati a +écrit : +><i> On Wednesday 08 Feb 2012 08:37 my mailbox was graced by a message from Claire +</I>><i> Robinson who wrote: +</I>><i> > > I ended up installing Mageia 1 on his box, but I wonder why does the +</I>><i> > > distribution allow the user to potentially hose his system, when it +</I>><i> > > requires the root password to install a prog ? +</I>><i> > > Would it not make more sense to ask for the root password for the updates? +</I>><i> +</I>><i> > It is configurable in MCC. You can find it under Security => Configure +</I>><i> > authentication for Mageia Tools. +</I>><i> > Just select root for Update. +</I>><i> +</I>><i> Brilliant, thanks. +</I>><i> +</I>><i> But would it not make more sense to have the default changed to root ? +</I> +That totally miss the point, which is that a upgrade hosed the system. +Would requiring the root password have changed that ? I doubt. + +However, if the user cannot do upgrade without asking to someone else +( because that's the whole point of having 2 different passwords, else, +that's just a nuisance that will confuse most people ), then he will +likely miss security and bugfixes updates, and that's problematic. + +And I truly doubt that having a separate person ( ie, asking to someone +else who has the root password ) would have avoid any issues due to +upgrade. I am pretty sure that both of us would have also updated the +computer. + +The risk is the lack of QA, and I have been repeating this since a long +time. If people cannot trust updates, they will use them, and they face +issues and security problems, and that will tarnish our reputation, +among others. +-- +Michael Scherer + + +</PRE> + + + + + +<!--endarticle--> + <HR> + <P><UL> + <!--threads--> + <LI>Previous message: <A HREF="006454.html">[Mageia-discuss] A possible risk ? +</A></li> + <LI>Next message: <A HREF="006426.html">[Mageia-discuss] A possible risk ? +</A></li> + <LI> <B>Messages sorted by:</B> + <a href="date.html#6425">[ date ]</a> + <a href="thread.html#6425">[ thread ]</a> + <a href="subject.html#6425">[ subject ]</a> + <a href="author.html#6425">[ author ]</a> + </LI> + </UL> + +<hr> +<a href="https://www.mageia.org/mailman/listinfo/mageia-discuss">More information about the Mageia-discuss +mailing list</a><br> +</body></html> |