You say that as though you feel that calling someone clueless were a bad
thing. There are tons of subjects I'm completely and utterly clueless
about and very happily so. But, as you say, that's not the point...
But not users with root access, which is the context in which my own
remark was. Enterprise users in corporations are not what I call the
desktop; I'd generally call those workstations, with the desktop being
your average home PC with the enormous amounts of cheap and buggy
hardware and the definite lack of central IT management.
It's also dependent on country. Over here in the Netherlands, corporate
adoption "on the workstation" is very low (and seemingly dropping again
after some initial attempts in local government) and adoption on the
desktop is for all intents and purposes 0. It's different especially in
eastern-europe.
Funny that really, how all that Free as in Speech stuff mostly works for
people without money...
Right, so that, then, is a threat model. I myself believe you are here
mostly to guard against 11-year old girls installing infected
screensavers of horses which given the fairly low adoption of Linux by
11-year old girls says something about my view of things.
But, yes, as I myself said as well, it might be sensible to discuss this
issue simply _as if_ lots of users were brushing their My Little Pony's
while waiting for their kernels to finish compiling if you're designing
something that _should_ protect them if they were.
Goes back really to the threat model question you were asked I guess.
Rene.
--