On Wed, 4 Nov 2009, Kevin Kofler wrote:
Richard June wrote:
It's a good idea for one off jobs where the primary user is also the
admin, but not so good for shared systems. Personally I think a better
plan would be to display that information *only* if the user is
flagged as an administrator, group root, wheel, etc.
It's actually a security risk to display this to non-admin users. It's like
putting a sticker on your door saying "This door is not locked because my
keyhole is not working."
i don't think it is a security risk. Or rather - if it is then the rpmdb
should not be readable by non-root users.
-sv
--
fedora-devel-list mailing list
fedora-devel-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-devel-list
