On 11/02/2009 09:31 PM, John Summerfield wrote:
To do the job properly, it should (at least) allow the root account
be disabled entirely, and insist that if that's done the installer also
creates an account that can be used for administration. Using sudo, not su.
Sudo doesn't allow fine grained access. PolicyKit (via pkexec) does,
which is why it is developed and favored by Fedora.