Comment 55 for bug 445123

It *doesn't* open a security hole and it *is* configurable. The bug is about lacking a *GUI* way of doing this for an individual end user. Such a feature would not be desired by system admins over seeing large deployments. Large deployments that require such functionality do not accomplish it by going around to each of the computers and using System->Administration tools to adjust these settings. The users wouldn't have su in such situations anyway.

The real point is that it's not just a simple matter of adding "one little checkbox". Such features need to be developed and tested properly before they are released, not jammed into the product at the last moment.