On Thu, 06 Nov 2008 09:53:09 -0800, Darren New wrote:

> Darren New wrote:
>> Well, it asks once per process you invoke with admin rights, just like
>> sudo. No, sudo doesn't ask for the password every time, but it makes
>> you type "sudo" every time, which was kind of what I was saying.
> 
> BTW, what prevents a program from trying to run sudo, just to see if
> your sudo hasn't expired yet, and thereby taking over your machine? I
> mean, if I don't have to actively confirm every request, why can't a
> program just occasionally try to trojan its way in?

A proper sudo configuration.  Which arguably I don't have. ;-)

> And, for the record:
> 1) SP1 apparently vastly improved how rarely you needed to UAC. 2) You
> can turn off UAC confirmations for administrators. 3) You can set
> administrators to needing to provide the password too. 4) There's a
> mildly hacky way (equivalent to setuid) to set up specific programs to
> run as administrator without any prompting.
> 
> So it's pretty flexible. If you want a root account, log in as
> administrator and turn off the UAC for administrators only. :-)

It's good to know they've fixed a few things, should I ever have a need 
to go back. :-)

Jim

Post a reply to this message