On Thu, 30 Jul 2015 18:59:31 +0200
tilt! <tilt@???> wrote:

> Hi Jaromil!
>
> Jaromil wrote on 29/07/2015 at 19:44 CEST:
> > [...]
> > how I do it now? hardcode every single binary
> > that sudo is aloud to execute, full path
> > and locations that are only root writable.
> > that's a sudoers feature...
>
> This is how I personally see it: In an ideal environment,
> there were *no* things done during regular use of a personal
> computing device that required administrative permissions.

It sounds to me like you guys are basically in agreement, becasuse
tilt! makes his point assuming, and I quote him:

"during regular use of a personal computing device"


SteveT

Steve Litt
July 2015 featured book: Rapid Learning for the 21st Century
http://www.troubleshooters.com/rl21