| The kudzu hardware detection daemon, created by Red Hat, runs on each boot, checks for new hardware, helps configure it if present, and then terminates. This can be a very useful daemon on workstation machines where users change their own hardware frequently. On the other hand, this daemon can allow unprivileged users (non-system administrators) to add and configure hardware with full root privilege. This generates some additional risk.
We believe that few environments need to give ordinary users this kind of privilege. This program can be safely deactivated. Even after such deactivation, sysadmins can indeed run kudzu from the command line to get the very same hardware detection and configuration functionality. |