Re: Privilege escalation policy and desktop_admin_r

2010-05-28 Thread Adam Williamson
On Fri, 2010-05-28 at 10:40 +0100, Tim Waugh wrote: > On Thu, 2010-05-27 at 09:02 -0700, Adam Williamson wrote: > > authentication; the same applies to any user account subsequently > > granted those privileges by the system administrator." > > Ah, OK, and this includes being added to *any* non-de

Re: Privilege escalation policy and desktop_admin_r

2010-05-28 Thread Tim Waugh
On Thu, 2010-05-27 at 09:02 -0700, Adam Williamson wrote: > authentication; the same applies to any user account subsequently > granted those privileges by the system administrator." Ah, OK, and this includes being added to *any* non-default groups I guess? Thanks for clarifying. Tim. */ sign

Re: Privilege escalation policy and desktop_admin_r

2010-05-27 Thread Adam Williamson
On Thu, 2010-05-27 at 16:53 +0100, Tim Waugh wrote: > On Thu, 2010-05-27 at 08:23 -0700, Adam Williamson wrote: > > The relevant bit here is the last sentence, which was intended to cover > > the whole desktop_admin_r stuff. Let me know if it's factually off. > > Seeing as desktop_admin_r is actua

Re: Privilege escalation policy and desktop_admin_r

2010-05-27 Thread Tim Waugh
On Thu, 2010-05-27 at 08:23 -0700, Adam Williamson wrote: > The relevant bit here is the last sentence, which was intended to cover > the whole desktop_admin_r stuff. Let me know if it's factually off. Seeing as desktop_admin_r is actually part of the default spin, can we add some text which expli

Re: Privilege escalation policy and desktop_admin_r

2010-05-27 Thread Adam Williamson
On Thu, 2010-05-27 at 09:49 -0400, Matthias Clasen wrote: > On Thu, 2010-05-27 at 12:01 +0100, Tim Waugh wrote: > > I have a question about how our privilege escalation policy interacts > > with the desktop_admin_r group. > > > > Is a member user of desktop_admin_r considered an "unprivileged user

Re: Privilege escalation policy and desktop_admin_r

2010-05-27 Thread Matthias Clasen
On Thu, 2010-05-27 at 12:01 +0100, Tim Waugh wrote: > I have a question about how our privilege escalation policy interacts > with the desktop_admin_r group. > > Is a member user of desktop_admin_r considered an "unprivileged user"? > No, he or she is considered privileged. -- devel mailing li

Privilege escalation policy and desktop_admin_r

2010-05-27 Thread Tim Waugh
I have a question about how our privilege escalation policy interacts with the desktop_admin_r group. Is a member user of desktop_admin_r considered an "unprivileged user"? Tim. */ signature.asc Description: This is a digitally signed message part -- devel mailing list devel@lists.fedoraproje