Idk what is bleachbit. But I know that "auth systems" can't "handle GUIs in a secure fashion". The app itself can be secure or not. By default they are not secure if they provide a GUI running in privileged process.
bizdelnick
I know. Don't do this. Read the manual.
It's not when app was written. Wayland apps probably work with sudo, x11 don't because sudo does not pass the $DISPLAY
environment variable. It's a correct behavior of sudo because running x11 apps with root permission you create a security hole.
Too many files in a directory?
Probably? They won't run with sudo
normally (in xorg at least). And only those explicitly allowed to be run with pkexec
by maintainers will do. Of course it is possible to evade this restriction, but you definitely should not.
Sysadmin GUI tools are designed to be secure by isolating GUI from privileged process. That is not true for a random GUI app.
Nope. Running GUI as root in the same X server as unprivileged apps is insecure because each of them can take control over privileged window. IDK if this issue has been addressed in Wayland, but anyway there are no wayland-only distros nowadays.
Don't do this. I'm unsure if this works in any distro, but if it does, this is unsecure.
Don't do this. I'm unsure if this works in any distro, but if it does, this is unsecure.
I have no idea what you are talking about. The answer to your question is: this is impossible and this is done for purpose. Don't try to work in linux like in windows.
gksu
andkdesu
are unsupported for >10 years iirc, they were not more secure thansudo
and that's one of the reasons they were abandoned. I've never heard aboutsux
. Polkit is a bit another thing that indeed replaced them, however it does not and can not separate GUI and non-GUI processes. The process itself has to fork, drop privileges and draw a GUI after that. There's no difference between running it viasudo
orpkexec
, however polkit provide additional protections to prevent running unsafe apps with elevated privileges.PAM and GVFS are not "privilege elevation frameworks" whatever you mean by this.