To view parent comment, click here.
To read all comments associated with this story, please click here.
Allowing a regular user to install anything that can be used by other users is a security concern.
For example, imagine there was a security bug in the font rendering library and someone has created a font that exploits that security bug to scan all accessible files for a user and look for Credit Card numbers. If you allow any user to install a global font every other user on the system can be affected, however if a user can only install fonts for themselves then only they can be affected.
"We care once we have to install new fonts to LaTeX and somehow figure out that these are installed in /usr/share/texmf/fonts/... or something similar. Moreover, since that directory is protected against ordinary users, you have to have sudo access. Good luck if you're not the administrator and he thinks he has more important things to do than install your font."
Well, actually, to use your example, fonts can be installed in the home directory without SysAdmin interference.
We usually do not "think" we have more important things to do btw, as our job is to make sure the network and servers are up and running. You can install your font without issue on any major linux distro, by yourself, without assistance and without hacks.
I think you (and most of the respondents) are missing the point, and I didn't mean all admins personally. In fact many of them have much more important things to do than install fonts.
The example is meant not about LaTeX per se (which I like and use every day) but about where it is normally installed, and how the OS interfaces with the user in ways that make no sense except to insiders, when alternative conventions are available.





Member since:
2005-07-06
We care once we have to install new fonts to LaTeX and somehow figure out that these are installed in /usr/share/texmf/fonts/... or something similar. Moreover, since that directory is protected against ordinary users, you have to have sudo access. Good luck if you're not the administrator and he thinks he has more important things to do than install your font.
Of course there are ways around this BUT the point is that it makes for an incredible hassle. If your system simply had a user-accessible virtual directory named "/fonts", and you could simply drag and drop your font there and have it instantly accessible to every program in the system because the system would by itself determine where you had permission to place the font, that would be preferable.
So I care.