Add administrative users to useful groups by default.

[RokeJulianLockhart]

My sole user for this machine is in none of the important groups by default. I've installed this to be used a personal machine, so this stuff should be configured automatically during intiial configuration by yast-installation.

This has meant that I am unable to invoke flatpak remove as my user. This prevents me removing them from plasma-discover either, which is a significant problem for a home user.

Instead, for simple administrative tasks, I must delegate them to the superuser. This a significant security and convenience flaw, which Fedora Workstation KDE Spin Rawhide does not share.

I've even had to manually add myself to wheel. That's why it is demonstrated as added in the screenshots:

[shundhammer]

This is not really related to yast-installation.

[RokeJulianLockhart]

How not so, @shundhammer? I expect that to occur during initial installation of OpenSUSE.

[shundhammer]

I am not convinced that this would be a good default.

If you really want this, it's just a few clicks away:

• YaST control center
• Users

• Edit (since you say you only have one user, that one is already selected)

• Details

• Select as many groups as you like
• OK
• OK

[RokeJulianLockhart]

Yeah, @shundhammer, but no new user will know to do that. Why would the default possibly prevent them using flatpak? It took me some time to research which user group allowed me to use the feature.

No other distribution has security policies like that. Those are the security policies I'd expect on RHEL or Windows Server (regarding winget) rather than Tumbleweed. At the very least, it's nonsensical because the user can still use zypper anyway, surely?

[shundhammer]

If this is desirable as a default, it should be done by a system-level command line tool, not by YaST. Just think about different installation methods, from image-based to potentially upcoming new installers. Hardcoding all kinds of weird stuff in YaST is a sure way to become incompatible.

[RokeJulianLockhart]

But @shundhammer, that's the thing. This distribution is the weird one. Its security policies are dissimilar to Fedora's, for instance.

[shundhammer]

Also, what's wrong with using good old sudo for tasks that require root privileges? It allows fine-grained permissions to be delegated to users. And it will not give every security expert a fit.

[RokeJulianLockhart]

@shundhammer, I genuinely hadn't considered that sudo would work! If prepending sudo was all that was needed, that makes a lot of sense.

[RokeJulianLockhart]

Also, close as not planned rather than completed.