86
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 15 Apr 2024
86 points (86.4% liked)
Linux
67363 readers
637 users here now
From Wikipedia, the free encyclopedia
Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).
Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.
Rules
- Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.
- No misinformation
- No NSFW content
- No hate speech, bigotry, etc
Related Communities
Community icon by Alpár-Etele Méder, licensed under CC BY 3.0
founded 7 years ago
MODERATORS
You don't need to run any GUI programs as root.
Now this is actually wrong. Firewall gui for example requires root. There are similar sysadmin guis that need it too
Sysadmin GUI tools are designed to be secure by isolating GUI from privileged process. That is not true for a random GUI app.
Probably? They won't run with
sudonormally (in xorg at least). And only those explicitly allowed to be run withpkexecby maintainers will do. Of course it is possible to evade this restriction, but you definitely should not.It's not when app was written. Wayland apps probably work with sudo, x11 don't because sudo does not pass the
$DISPLAYenvironment variable. It's a correct behavior of sudo because running x11 apps with root permission you create a security hole.I know. Don't do this. Read the manual.
Idk what is bleachbit. But I know that "auth systems" can't "handle GUIs in a secure fashion". The app itself can be secure or not. By default they are not secure if they provide a GUI running in privileged process.
gksuandkdesuare unsupported for >10 years iirc, they were not more secure thansudoand that's one of the reasons they were abandoned. I've never heard aboutsux. Polkit is a bit another thing that indeed replaced them, however it does not and can not separate GUI and non-GUI processes. The process itself has to fork, drop privileges and draw a GUI after that. There's no difference between running it viasudoorpkexec, however polkit provide additional protections to prevent running unsafe apps with elevated privileges.PAM and GVFS are not "privilege elevation frameworks" whatever you mean by this.
Nope. Running GUI as root in the same X server as unprivileged apps is insecure because each of them can take control over privileged window. IDK if this issue has been addressed in Wayland, but anyway there are no wayland-only distros nowadays.
Now i question why the whole GUI needs to run as root (even in working default config) instead of just the tool running the command with root.
But not gparted.
There's one in every thread.
I have no idea what you are talking about. The answer to your question is: this is impossible and this is done for purpose. Don't try to work in linux like in windows.
Your attitude.
It's not attitude they are giving you. It's strong recommendation. It's the strong recommendation of the entire Linux community.
Sudo is different than run as admin and is not intended to be used to do things the way Windows does them.