To view parent comment, click here.
To read all comments associated with this story, please click here.
Seconded!
Sudo and su in Linux work much better, both because they actually require you to authenticate, and because they're process-based -- meaning that, after I launch a process as root, I don't get bothered again based on what that process does. If I felt like it, I could launch an xterm as root using sudo when I log in, and whenever I needed to perform an administration task, I could just use that xterm, and it'd never bother me for authentication again. Equally, if I know I'm going to be performing a lot of administration tasks, I can just log in as root; if I do that, the system never even bothers me.
Windows 7 UAC is a bit better tuned-- Not sure I'm happy about an application being able to retune it silently, but that's fixable.
UAC is more like interactive SElinux-- Even if you're root, it's going to ask if you're certain you want to do that.
Now, if you remove the "Administrator" flag (ie, take yourself out of the 'wheel' group) from your account, then UAC requires you to authenticate as someone with privilege.
For supporting our (non-privileged) users, this is very useful, as we get prompted for our username/password when doing administration, instead of having to either log out and back in, or having to do fancy "runas" tricks.




Member since:
2005-08-07
Auzy astroturfed...
Not even remotely close to being the same thing.
I can't speak about policykit, but I know at least in Ubuntu when I get hit by sudo and have to elevate permissions I get that password request--which proves that I have rights to the system. Moreover it remembers that I have elevated rights for awhile, so I can get whatever it was I was trying to do done.
UAC just looks over at me through bleary eyes and asks: "Are you sure you want to do that?" Then once I've told it that, yes I know that I'm performing a potentially dangerous system task, that might require elevated permissions to be granted--it doesn't ask me to authenticate myself. It just hits me up with several more warnings as I go along, never once asking me to prove I have the right to perform these potentially dangerous actions.
Yes, with sudo may be a bit annoying to have to play "Simon says," but at least the OS is aware that I AM Simon! UAC is a joke.
Auzy astroturfed...
How quickly they forget...
http://www.osnews.com/story/19620/_Vista_s_UAC_Security_Prompt_Was_...
Read the article and you'll see quite clearly that yes, UAC was designed to irritate you, not to be functional.
--bornagainpenguin