5 ms·
> I purposefully make my primary account a non-administrator and elevate permissions with my administrator account when I need to perform administrative tasks
by filleduchaos 7y ago
> I purposefully make my primary account a non-administrator and elevate permissions with my administrator account when I need to perform administrative tasks
So...elevate permissions when you need to perform this new administrative task? I don't see how that changes the crux of the matter (you still are the de facto admin, even though you've applied artificial constraints to yourself, because you hold the admin credentials).
- saagarjha 7y agoArbitrary programs cannot use de facto credentials.
- filleduchaos 7y ago...yes, they can? You're prompted to provide credentials (in some cases biometrics is fine, in others you must enter the password) if you/an application is trying to do something that requires escalated privileges. Do you use macOS?
- saagarjha 7y agoRight, but now you have explicit consent required to elevate to that level, whereas if you’re running as root already you can just silently do things without the user knowing. > Do you use macOS? Almost exclusively.