4 ms·
At least polkit is a policy engine that tries to enforce security based upon what you're doing rather than which command you run. Sudo is a broken design IMO,
by admax88q 7y ago
At least polkit is a policy engine that tries to enforce security based upon what you're doing rather than which command you run. Sudo is a broken design IMO, I only ever use it locally to run all root commands so I don't accidentally nuke an important system directory.
Polkit isn't great, but it's also been given the hard job of trying to retrofit policy based security to a system that was not designed with that in mind. But with sudo, so many commands in linux are such a swiss army knife of options that I think its incredibly easy to open up priviledge escalation by adding a seemingly innocent command to somebodies sudoers.