[IAEP] [Sugar-devel] [SLOBS] Long-term support for Sugar

[Yamandu Ploskonka]

Very good point you make.  It gets complicated as the users - kids - 
have not been shown they get it regarding giving their full name, age 
and address and some even phone number, so it is unlikely they will deal 
safely with the nuances of "untrusted sources".
It would be sort of a shame that the first massive attack of malware on 
Linux platforms happened under our watch...

Yama

Chris Ball wrote:
> Hi,
>
>    > TBH I'm not 100% sure on that as I'm not a PackageKit developer
>    > but I believe that is addressed by ConsoleKit and as its in use
>    > on Fedora and I'm pretty sure Ubuntu and others (and I'm pretty
>    > sure its an external dependency of gnome too) I'm sure that issue
>    > has been addressed.
>
> My understanding is that the developers consider it addressed by
> "%post runs as root, and if you don't like it then don't install RPMs
> [from untrusted sources]".  So, we need to find out what's up there.
>
> - Chris.
>