david at fubar.dk
Tue Mar 25 02:27:00 PDT 2008
On Tue, 2008-03-25 at 05:16 -0400, David Zeuthen wrote:
> On Tue, 2008-03-25 at 08:28 +0000, Richard Hughes wrote:
> > Doing it per-user, also means we don't have to add extra configuration
> > as we can use the gnome-desktop settings if we are in GNOME and the KDE
> > ones if we are in KDE.
> That would be nice. However it would be a big security hole to do so.
> Keep in mind that the user session is always to be considered hostile.
> (What you could do instead is making the packagekit system daemon read
> the proxy settings from the mandatory and default area of gconf.)
Or even better. Restrict the ability to set proxy settings from the user
session with a PolicyKit action. Then big sites can lock this down.
Guess I should get some sleep ;-)
More information about the PackageKit