[Mageia-discuss] A possible risk ?

[Wolfgang Bornath]

2012/2/8 Sander Lepik <sander.lepik at eesti.ee>:
> 08.02.2012 13:47, Renaud (Ron) Olgiati kirjutas:
>
>> Brilliant, thanks.
>>
>> But would it not make more sense to have the default changed to root ?
>
> Updates shouldn't break system and so i think they should be enabled for
> normal users. Upgrades is something else and should be disabled for normal
> users. You can report bug about this problem.

Last November I setup my normal Mageia system to auto-boot into xguest
so visitors at the Mageia stand at an exhibition can try out Mageia. I
was surpised and shocked when I watched the update icon light up and
the visitor could perform this update as xguest! This IS a risk no
matter whether an update breaks a system or not. After I saw this the
first thing I did was su into root and change the permission setting
for updates.

This is one thing where security was broken for ease of use.

-- 
wobo