Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow admin users to remove packages without password prompt #492

Closed
wants to merge 1 commit into from
Closed

Allow admin users to remove packages without password prompt #492

wants to merge 1 commit into from

Commits on Jun 22, 2021

  1. Allow admin users to remove packages without password prompt

    A local, active admin user can install packages without a password
    prompt, but has to enter the admin password to remove packages. This
    doesn't make much sense. It should be parallel.
    
    Note that this change has no effect on what users are able to do,
    because it only applies to admin users. The password only protects
    against unlocked workstation attackers, where an attacker gains physical
    access to an unlocked desktop. It's pretty weird to prevent such an
    attacker from removing software, but allow installing new stuff.
    
    This makes users more vulnerable to secret agents who access your laptop
    when you leave it unlocked while ordering a coffee. This is just not a
    very practical concern for most users. I'd be more upset about somebody
    viewing my files if I leave my laptop unlocked, not so upset about
    somebody uninstalling Calendar or whatnot.
    
    https://pagure.io/fedora-workstation/issue/233
    mcatanzaro committed Jun 22, 2021
    Configuration menu
    Copy the full SHA
    0216c45 View commit details
    Browse the repository at this point in the history