On 01/ 8/10 04:23 PM, Peter Tribble wrote: > On Fri, Jan 8, 2010 at 7:53 AM, Anon Y Mous<music_analyst at yahoo.com> > wrote: >>> The average server user wants a different setup than your average desktop >>> user. >>> While asking the user a question about whether they want the "Face Browser" >>> enabled would be confusing, I think the installer would benefit from having >>> a >>> screen where the user picks what type of use-profile they want to use: >> >> No, the face browser should just NEVER be enabled on OpenSolaris unless >> (after the installation) the user goes in to some desktop admin >> configuration tool and explicitly enables it. > > I think that's too strong. I think enabling something like this by > default is perfectly reasonable behaviour. The class of users > who would benefit most from it wouldn't know how to enable it. > Those that don't want it will tend to be those technically competent > to turn it off (and if you're talking servers then [a] they shouldn't have > accessible consoles and [b] wouldn't be running gdm in the first > place).
I have to agree with Peter. While this may not be the 'best security practice', you have to consider the target audience here. So far, the focus has been on desktop and laptop users for whom I think it should be enabled by default. Either the installer needs to ask a simple profile question and tailor the install defaults, or there needs to be multiple editions of the OpenSolaris distribution with appropriate defaults. -- Shawn Walker
