Re: security policy / root passwords

[Uoti Urpala <uoti.urpala@pp1.inet.fi>]

Daniel Pocock wrote:
> It was also demonstrated with Windows 7 that users could be tricked by
> web sites that simply dimmed the background of the browser window - so
> it is not a perfect solution and I would personally prefer to see users
> referred to initiate "su" or "sudo" on their own.

Initiate "su" or "sudo" as in from a terminal? Conditioning users to
write commands in a terminal when prompted by a dialog sounds even worse
than leaking passwords. At least leaking system passwords is less
catastrophic when the system allows no remote login.