[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kde-core-devel
Subject:    Re: security vs. usability
From:       Tim Lee <tlee () tc ! fluke ! com>
Date:       2001-02-06 17:05:55
[Download RAW message or body]

On Tuesday 06 February 2001 04:18 am, Stephan Kulow wrote:
> Bernhard Rosenkraenzer wrote:
> > On Tue, 6 Feb 2001, Stephan Kulow wrote:
> > > > This works for programmers, but what about the admin who just wants
> > > > to give his (trusted) users access to the CD writer?
> > >
> > > He can still compile a copy of kdelibs without this abort if he's
> > > really that sure he knows what he does.
> >
> > Not that every admin is a programmer and could locate/remove the code
> > causing this...
> >
> > The typical user who would want to make KDE applications setuid is a home
>
> Not that a user who wants to make KDE applications setuid is a typical
> user.
>
> > user who doesn't have much of a clue, and also doesn't have any users he
> > doesn't trust (e.g. home user with his family).
>
> Tja, then he has a problem and will have to use kdesu with password
> caching.

That is totally unworkable.  First I don't want and will not allow my kids
to have the root password for my machine at home.  Second it should
be simple to give them access to what I want them to have access 
to (CD burner, scanner, internet) without requiring them to have any
kind of root access, and an average user should be able to set it up,
simply.

This should be my choice as it always has been.

>
> Greetings, Stephan

Regards,
-- 
++++++++++++++++++++++++++++++++++++++++++++
Tim Lee             Email: tlee@tc.fluke.com
R&D Engineer       Phone: (719)598-3842 x651
Fluke Corporation       FAX:   (719)598-2063
6805 Corporate Drive, Suite 100
Colorado Springs, CO 80919
++++++++++++++++++++++++++++++++++++++++++++ 

[prev in list] [next in list] [prev in thread] [next in thread]