On Wednesday 24 March 2010, Petter Reinholdtsen wrote: > > What about (server) systems that don't have consolekit installed? > > Yes, what about them?
On such systems the first user would be left without expected default access to devices. > If the local user to have special privileges, one should install the > packages providing such privileges to the local user. There's more way than one to Rome. Group membership is a traditional and still valid way to provide rights. Having packages like consolekit installed is not a requirement. > > What harm do the current group assignments do? After all, we're only > > talking about the first user here! > > It grant local device access to a user that should not have it. The > first user should not have local device access, unless that user is > logged in locally on the machine console. Why should that user not have it? For the purpose of D-I installations the first user is defined as being the admin and/or console user of the system. If you install systems where the first user does not hold that role, you should disable creation of the first user account during installation, or tune the default groups he's made a member of. I disagree with this proposed change. IMO the default group assignments are in line with the purpose of the first user account. Cheers, FJP -- To UNSUBSCRIBE, email to debian-boot-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/201003242309.52044.elen...@planet.nl