On Wed, Jan 20, 2010 at 4:15 AM, Adam Williamson <awilliam(a)redhat.com> wrote:
Hi, everyone. As you may know if you've followed the meetings,
cheerfully punted the privilege escalation policy issue back to us; they
want us to come up with a draft policy to take back to a FESCo meeting.
* Run an application that listens on a network port lower than 1024
* Mount or unmount anything (excluding automounted hotplugged storage
devices, and devices explicitly configured by the root user for
Define "anything" what about fuse mounts? (like sshfs, or those done by gvfs)