* Matthias Urlichs <matth...@urlichs.de> [141130 09:22]: > But on a multi-user system, we can't depend on the first user being any > sort of special owner; it might just as well be the person whose desk > the machine is hidden under
I strongly disagree with this. The person performing the installation clearly has root privileges while the installation is being performed, and is much more likely to be at least one of the people responsible for maintaining the system. While not a universal truth, there is a high probability that this person will have additional privileges beyond a normal user, either by the first user being added to extra groups, by the person doing the installation having root privileges (by knowing the root password or through sudo), or both. As for the fallacy that adding the first user to additional groups is a privacy or security issue, if we can agree that there is at least one administrator with root privileges, and the first user added by the installer likely belongs to such a person, what good does it do to not add the first user to the audio group? With root privileges, the admin can do all of the things mentioned in this thread to invade other users' privacy. Trying to give a false sense of security by saying "we don't give the first user special privileges, so you don't have to worry about being spied on remotely" is a complete lie. If you don't trust the administrators of your machine, then assume they are spying on you; there is no other reasonable assumption, and refusing to add the first user to special groups does not change that. The only case where not adding the first user to special groups would make a difference is when the person doing the installation for a machine shared by multiple users asks the installer to add the first user, but assigns that first user to one of the non-administrators of the machine. I think this is extremely rare in practice, in both business and home settings. ...Marvin -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/20141204152736.gf3...@basil.wdw