William Jon McCann (william.jon.mccann(a)gmail.com) said:
So what is our view of setting up sudo by default for standalone
systems? Probably has some relationship with the systems on which we
prevent root logins.
It is worth noting that many of us have to set up ourselves each time
we install Fedora. Might be nice if something like it was done by
default.
Is sudo the right answer or should we be thinking about pkexec? Thoughts?
I thought the idea was setting up desktop_admin_r, and that for the
standalone systems, we were trying to avoid having to rely on anything
that would need to be exposed via sudo.
As for me, I tend to just uncomment some of the more drastic lines in
pam.d/su.
Bill