[packagekit] DBUS configuration

Richard Hughes hughsient at gmail.com
Sat Mar 1 01:45:11 PST 2008


On Sat, 2008-03-01 at 00:16 +0100, Sebastian Heinlein wrote:
> No software is completely secure and this also applies to packagekitd.

Totally.

> So from a security point of view you would ask the wrong question. You
> should ask yourself, why do you need to run anything as root. And I
> don't see any reasons here.

Well, I just don't see what security benefit it could bring. If you've
got acccess to a user that can write files on the filesystem
(/etc/shadow) then you've lost all security anyway.

Richard.





More information about the PackageKit mailing list