root almighty

[Yogiz]

Someone correct me if I'm wrong but is that really so hard to fix? If
one has time to play around, default login can be substituted with one
of a restricted user. Check out what breaks, fix it, repeat. What must
be absolutely run as root can be but I'm sure it wouldn't be that hard
to move most of the userspace to restricted user accounts. What's the
hard part?

Yogiz

On Tue, 19 May 2009 13:53:15 +0700
Max <max at darim.com> wrote:

> Hello.
> 
> As far as I know most (all?) distributions for FR use root account to
> run phone application and to access device via ssh. To my mind this
> introduce great security risk.
> 
> At the same time on my Ubuntu by default root is unable to logon
> anyhow and everything is done via sudo. This lets me think that there
> is no need to use root account on FR - at least not for running phone
> application and for remote access.
> 
> I wonder - is there distribution which tried to address this issue?
> Are there any plans to use regular user instead of root in om2009?
> Maybe using package-kit (which works via dbus btw) and policy-kit
> might help?
> 
> best regards,
> Max.
> 
> 
> _______________________________________________
> Openmoko community mailing list
> community at lists.openmoko.org
> http://lists.openmoko.org/mailman/listinfo/community