On 4/1/06, Rahul Sundaram <sundaram(a)fedoraproject.org> wrote:
The browser automatically installing packages just because you
visited
the page. You will have confirm to something and supply the root
password and there is GPG keys to verify the source and there is SELinux
to confine the amount of permissions that a browser has.
Uhm... i think the nature of package installation pretty much requires
a very very loose selinux policy associated with it because the rpm
process which must be spawned software could concievable modifiy
pretty much any system file as part of a perfect valid package
install/update.
-jef