summaryrefslogtreecommitdiffstats
path: root/zarb-ml/mageia-discuss/20120208/006437.html
diff options
context:
space:
mode:
Diffstat (limited to 'zarb-ml/mageia-discuss/20120208/006437.html')
-rw-r--r--zarb-ml/mageia-discuss/20120208/006437.html107
1 files changed, 107 insertions, 0 deletions
diff --git a/zarb-ml/mageia-discuss/20120208/006437.html b/zarb-ml/mageia-discuss/20120208/006437.html
new file mode 100644
index 000000000..a93f293c9
--- /dev/null
+++ b/zarb-ml/mageia-discuss/20120208/006437.html
@@ -0,0 +1,107 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
+<HTML>
+ <HEAD>
+ <TITLE> [Mageia-discuss] A possible risk ?
+ </TITLE>
+ <LINK REL="Index" HREF="index.html" >
+ <LINK REL="made" HREF="mailto:mageia-discuss%40mageia.org?Subject=Re%3A%20%5BMageia-discuss%5D%20A%20possible%20risk%20%3F&In-Reply-To=%3C4F3290B7.9080007%40gmail.com%3E">
+ <META NAME="robots" CONTENT="index,nofollow">
+ <META http-equiv="Content-Type" content="text/html; charset=us-ascii">
+ <LINK REL="Previous" HREF="006436.html">
+ <LINK REL="Next" HREF="006441.html">
+ </HEAD>
+ <BODY BGCOLOR="#ffffff">
+ <H1>[Mageia-discuss] A possible risk ?</H1>
+ <B>Claire Robinson</B>
+ <A HREF="mailto:mageia-discuss%40mageia.org?Subject=Re%3A%20%5BMageia-discuss%5D%20A%20possible%20risk%20%3F&In-Reply-To=%3C4F3290B7.9080007%40gmail.com%3E"
+ TITLE="[Mageia-discuss] A possible risk ?">eeeemail at gmail.com
+ </A><BR>
+ <I>Wed Feb 8 16:11:51 CET 2012</I>
+ <P><UL>
+ <LI>Previous message: <A HREF="006436.html">[Mageia-discuss] A possible risk ?
+</A></li>
+ <LI>Next message: <A HREF="006441.html">[Mageia-discuss] A possible risk ?
+</A></li>
+ <LI> <B>Messages sorted by:</B>
+ <a href="date.html#6437">[ date ]</a>
+ <a href="thread.html#6437">[ thread ]</a>
+ <a href="subject.html#6437">[ subject ]</a>
+ <a href="author.html#6437">[ author ]</a>
+ </LI>
+ </UL>
+ <HR>
+<!--beginarticle-->
+<PRE>On 08/02/12 14:57, nicolas vigier wrote:
+&gt;<i> On Wed, 08 Feb 2012, Michael Scherer wrote:
+</I>&gt;<i>
+</I>&gt;&gt;<i> Le mercredi 08 f&#233;vrier 2012 &#224; 08:47 -0300, Renaud (Ron) Olgiati a
+</I>&gt;&gt;<i> &#233;crit :
+</I>&gt;&gt;&gt;<i> On Wednesday 08 Feb 2012 08:37 my mailbox was graced by a message from Claire
+</I>&gt;&gt;&gt;<i> Robinson who wrote:
+</I>&gt;&gt;&gt;&gt;&gt;<i> I ended up installing Mageia 1 on his box, but I wonder why does the
+</I>&gt;&gt;&gt;&gt;&gt;<i> distribution allow the user to potentially hose his system, when it
+</I>&gt;&gt;&gt;&gt;&gt;<i> requires the root password to install a prog ?
+</I>&gt;&gt;&gt;&gt;&gt;<i> Would it not make more sense to ask for the root password for the updates?
+</I>&gt;&gt;&gt;<i>
+</I>&gt;&gt;&gt;&gt;<i> It is configurable in MCC. You can find it under Security =&gt; Configure
+</I>&gt;&gt;&gt;&gt;<i> authentication for Mageia Tools.
+</I>&gt;&gt;&gt;&gt;<i> Just select root for Update.
+</I>&gt;&gt;&gt;<i>
+</I>&gt;&gt;&gt;<i> Brilliant, thanks.
+</I>&gt;&gt;&gt;<i>
+</I>&gt;&gt;&gt;<i> But would it not make more sense to have the default changed to root ?
+</I>&gt;&gt;<i>
+</I>&gt;&gt;<i> That totally miss the point, which is that a upgrade hosed the system.
+</I>&gt;&gt;<i> Would requiring the root password have changed that ? I doubt.
+</I>&gt;&gt;<i>
+</I>&gt;&gt;<i> However, if the user cannot do upgrade without asking to someone else
+</I>&gt;&gt;<i> ( because that's the whole point of having 2 different passwords, else,
+</I>&gt;&gt;<i> that's just a nuisance that will confuse most people ), then he will
+</I>&gt;&gt;<i> likely miss security and bugfixes updates, and that's problematic.
+</I>&gt;<i>
+</I>&gt;<i> It's not clear if we are talking about installing updates only, or
+</I>&gt;<i> upgrading to a new version of the distribution. Installing updates is
+</I>&gt;<i> supposed to be safe and can be allowed by default with user password.
+</I>&gt;<i> But upgrading to a new distribution is more dangerous and should
+</I>&gt;<i> probably only be allowed with root password.
+</I>&gt;<i>
+</I>
+It should probably be some comfort that we do actually have a root account.
+If this were Ubuntu then it would require a bit more effort to lock down
+than a choice in MCC :)
+</PRE>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+<!--endarticle-->
+ <HR>
+ <P><UL>
+ <!--threads-->
+ <LI>Previous message: <A HREF="006436.html">[Mageia-discuss] A possible risk ?
+</A></li>
+ <LI>Next message: <A HREF="006441.html">[Mageia-discuss] A possible risk ?
+</A></li>
+ <LI> <B>Messages sorted by:</B>
+ <a href="date.html#6437">[ date ]</a>
+ <a href="thread.html#6437">[ thread ]</a>
+ <a href="subject.html#6437">[ subject ]</a>
+ <a href="author.html#6437">[ author ]</a>
+ </LI>
+ </UL>
+
+<hr>
+<a href="https://www.mageia.org/mailman/listinfo/mageia-discuss">More information about the Mageia-discuss
+mailing list</a><br>
+</body></html>