bizdelnick

joined 2 years ago
[–] bizdelnick@lemmy.ml 1 points 1 year ago (1 children)

gksu and kdesu are unsupported for >10 years iirc, they were not more secure than sudo and that's one of the reasons they were abandoned. I've never heard about sux. Polkit is a bit another thing that indeed replaced them, however it does not and can not separate GUI and non-GUI processes. The process itself has to fork, drop privileges and draw a GUI after that. There's no difference between running it via sudo or pkexec, however polkit provide additional protections to prevent running unsafe apps with elevated privileges.

PAM and GVFS are not "privilege elevation frameworks" whatever you mean by this.

[–] bizdelnick@lemmy.ml 1 points 1 year ago (3 children)

Idk what is bleachbit. But I know that "auth systems" can't "handle GUIs in a secure fashion". The app itself can be secure or not. By default they are not secure if they provide a GUI running in privileged process.

[–] bizdelnick@lemmy.ml 1 points 1 year ago (5 children)

I know. Don't do this. Read the manual.

[–] bizdelnick@lemmy.ml -1 points 1 year ago (7 children)

It's not when app was written. Wayland apps probably work with sudo, x11 don't because sudo does not pass the $DISPLAYenvironment variable. It's a correct behavior of sudo because running x11 apps with root permission you create a security hole.

[–] bizdelnick@lemmy.ml 1 points 1 year ago (1 children)

Too many files in a directory?

[–] bizdelnick@lemmy.ml -2 points 1 year ago (9 children)

Probably? They won't run with sudo normally (in xorg at least). And only those explicitly allowed to be run with pkexec by maintainers will do. Of course it is possible to evade this restriction, but you definitely should not.

[–] bizdelnick@lemmy.ml 8 points 1 year ago

Sysadmin GUI tools are designed to be secure by isolating GUI from privileged process. That is not true for a random GUI app.

[–] bizdelnick@lemmy.ml 7 points 1 year ago (1 children)

Nope. Running GUI as root in the same X server as unprivileged apps is insecure because each of them can take control over privileged window. IDK if this issue has been addressed in Wayland, but anyway there are no wayland-only distros nowadays.

[–] bizdelnick@lemmy.ml 9 points 1 year ago

Don't do this. I'm unsure if this works in any distro, but if it does, this is unsecure.

[–] bizdelnick@lemmy.ml 0 points 1 year ago

Don't do this. I'm unsure if this works in any distro, but if it does, this is unsecure.

[–] bizdelnick@lemmy.ml 2 points 1 year ago (2 children)

I have no idea what you are talking about. The answer to your question is: this is impossible and this is done for purpose. Don't try to work in linux like in windows.

view more: ‹ prev next ›