-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ralf Mardorf wrote:
> Gustin Johnson wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> Michael Jarosch wrote:
>>  
>>> Am Montag, den 29.06.2009, 08:08 +0200 schrieb Ralf Mardorf:
>>>    
>>>> There might be a better way to do it.
>>>>       
>>> There will be a better way to do it: Later versions (but certainly not
>>> that of 8.04) of the "Frequency Scaling Monitor Applet" will support
>>> "policy kit". For now, there is no better way than setting SUID. This is
>>> not a big problem for a multimedia system IMHO - earth health comes
>>> before security... :)
>>>
>>>     
>> Seriously, just use a password.  Security and power saving at the same
>> time.
> 
> How can this be done for the panel applet? And the password is required
> for each session? I can't relay on being save with the SUID set for this
> application and it depends on a kernel module, however, I trust that
> even if somebody would hack my machine, that this won't have grievous
> consequences. I don't run a firewall and highlighted no AppAmor on 64
> Studio. I know people who have the opinion, that a distro that don't
> runs AppArmor by default is invalid. IMO AppArmor is redundant and a
> Firewall is it too. Not to set the SUID bit seems to be much, much

AppArmor and a firewall are redundant?  The phrase "defense in depth" is
not just a sales term, every level needs to be protected.  Microsoft
understands this as well, perhaps better than most.

> better. I'm busy because of other stuff I have to do. I agree with "IMHO
> - earth health comes before security... :)" by Michael.

I actually disagree with both you.  I do not see security and efficiency
  (which is what "green" is really talking about) as mutually exclusive.
 As I see it both are important components to a well designed system.
Framing the discussion as an either or choice is not useful and is
actually harmful.  Consider that most compromised machines have a
heavier load than if they were not compromised, so they are using more
energy.

> This really is something that should be solved and a default for 3.0.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkpJAVMACgkQwRXgH3rKGfOpNwCgr3UEnjhk0r39S457sktnNUNK
JyAAoK9YhUak/SnFPH5OWcgKlEieQpAm
=MoDu
-----END PGP SIGNATURE-----
_______________________________________________
64studio-users mailing list
64studio-users@lists.64studio.com
http://lists.64studio.com/mailman/listinfo/64studio-users

Reply via email to