Email or username:

Password:

Forgot your password?
Lennart's posts Post Back to profile
Top-level
Ofee Oficsu

@pid_eins, am I right you are about plugins and complicated configuration of sudo?

While I agree with you that sudo is overengineered, I also accept it was not created out of nothing and solves some problems someone really needs to solve in a case when run0 is not enough

And leaving aside a functionality trade-off, I think both sudo and run0 (...and many others) can benefit from a some new kernel mechanism instead of manual implementation on systemd side

30 April at 12:00 | Wall-to-wall | Open on mastodon.social
2 comments
Lennart Poettering

@oficsu Just read what I originally wrote. I think I a was pretty clear.

30 April at 12:11 | Open on mastodon.social
Ofee Oficsu

@pid_eins, I read all thread and I see 3 main points:
* complicated configuration;
* no way to acquire privileges temporarily;
* hard to get the clean environment during a privileged operation;

We are leaving the first point aside (it's about trade-offs). And for the rest two, it's better to allow the kernel to manage privilege acquiring (e.g. by forwarding requests to systemd via a new kernel mechanism) and to create a clean environment during these operations. Am I still missing something?

30 April at 12:31 | Open on mastodon.social
Go Up