On 11/19/2009 04:45 PM, Richard Hughes wrote:
So obviously we need some middle ground. I guess if the spins "personalise" the package set then they should also personalize the security defaults. e.g. a server spin would not include PackageKit at all, and default to not letting users change the time. A desktop spin would allow the desktop user to do most things without a administrator password. The tricky part is deciding a default policy that is suitable for all the people using Fedora, which honestly, I think is impossible.
Right. The alternative really is defining the roles and the target audience clearly for distinct set of policies and allowing the user to trivially select it during or post-installation.
So if I pick "personal desktop", the change you made makes sense. If on the other hand, I choose "workstation" profile, I would obviously need a more locked down profile.
Rahul