• 1 Post
  • 223 Comments
Joined 2 years ago
cake
Cake day: June 26th, 2023

help-circle
rss




  • gksu and kdesu are unsupported for >10 years iirc, they were not more secure than sudo and that’s one of the reasons they were abandoned. I’ve never heard about sux. Polkit is a bit another thing that indeed replaced them, however it does not and can not separate GUI and non-GUI processes. The process itself has to fork, drop privileges and draw a GUI after that. There’s no difference between running it via sudo or pkexec, however polkit provide additional protections to prevent running unsafe apps with elevated privileges.

    PAM and GVFS are not “privilege elevation frameworks” whatever you mean by this.













  • Use bash-completion, it is much faster than clicking menus.

    every distro I’ve tried has a strong sense that if you’re using the GUI you don’t need or deserve admin controls

    GUI tools are not suited to be run as root in general. Few ones that are have special measures taken to prevent gaining privileges by another process, e. g. run a background non-GUI process as root and GUI communicating with it as an ordinary user. Such tools (package managers, system tweakers etc.) are usually configured to get required privileges via polkit (e. g. pkexec synaptic to run GUI package manager in Debian). Don’t use sudo to run GUI programs!