On Mon, Feb 23, 2009 at 03:13:02PM -0500, Christopher Beland wrote:
It looks like what short of authentication is required to change the
system clock is now configurable in System -> Preferences ->
Authorizations.
It is not a question how to change authorizations but that default
authorizations, i.e. what you will get on just installed system, are
seriously backwards defaulting to a security disaster. Yes, you can
fix that using polkit-action, if you noticed that something is
amiss, but I wonder on how many installed systems this was actually
done and what else is lurking there.
The issue was reported at least on 2008-06-06 as
https://bugzilla.redhat.com/show_bug.cgi?id=450304
Michal