Slashdot Mirror


Torvalds Calls OpenSUSE Security 'Too Intrusive'

jfruh writes "The balance between security and ease of use is always a tricky one to strike, and Linux distros tend to err on the side of caution. But no less a luminary than Linus Torvalds thinks openSUSE has gone too far. When his kid needed to call from school for the root password just so he could add a printer to a laptop, that's when Linus decided things had gone off the rails."

4 of 311 comments (clear)

  1. Too much root is not a good thing by Toe,+The · · Score: 5, Insightful

    I see this on Macs a lot. If you want to install anything, you have to type an administrator's password.

    In theory, that's great. But in effect, you are giving that installer root access. So if I understand correctly, that installer could be putting any amount of spyware (or whatever) into your computer and nearly perfectly cover its tracks.

    Otoh, many Mac apps are distributed as disk images, where you simply drag them from the image to your drive, and that's it. No password at all. If you're going to use pre-rolled software, that certainly seems more trustworthy. But of course, it is a lot more complicated of a process for the average user to be able to ever understand.

  2. What an ass by MatthiasF · · Score: 5, Insightful

    He could have just added the user to the sudo group and been done.

    But no, he had to go harping on everyone on bug lists and social media rants to put people down, even suggesting whoever made the system should die.

    What an ass.

    1. Re:What an ass by Hatta · · Score: 5, Insightful

      Why should he have to do that? Why isn't it sufficient to add the user to the 'lp' group? There's no reason that printing should require root access at all.

      --
      Give me Classic Slashdot or give me death!
    2. Re:What an ass by OzPeter · · Score: 5, Insightful

      Why should he have to do that? Why isn't it sufficient to add the user to the 'lp' group? There's no reason that printing should require root access at all.

      Why does an administrator have to add anyone to anything in order to do a commonplace task on a machine that is really a commodity item?
       
      Not that I have read his rants but I get where he is coming from.

      --
      I am Slashdot. Are you Slashdot as well?