Sudo and its alternatives

Posted Feb 21, 2024 21:13 UTC (Wed) by flussence (guest, #85566)
Parent article: Sudo and its alternatives

I'm happy with what /etc/suauth provides. My systems have s6-sudo available but I've never used it; it seems like needless complexity to have privesc as part of the service manager when top-down confinement is an option.

to post comments

Sudo and its alternatives

Posted Feb 22, 2024 16:17 UTC (Thu) by spacefrogg (subscriber, #119608) [Link] (1 responses)

The service manager already has to do everything that sudo has, just to isolate services from each other and from the rest of the system. And I practically cannot get rid of it. First, it is natural to expose this functionality in a human interface. Second, why would I trust your sudo implementation more than the service manager I already have and already need?

Sudo and its alternatives

Posted Feb 22, 2024 19:18 UTC (Thu) by flussence (guest, #85566) [Link]

I'm not sure what you think you're replying to; s6-sudo is part of the service manager.