3 ms·
> You will be prompted for a password, and ultimately able to do it; but no setuid binary is involved. Polkit/pkexec is setuid.
by mid-kid 3y ago
> You will be prompted for a password, and ultimately able to do it; but no setuid binary is involved.
Polkit/pkexec is setuid.
- yrro 3y agopolkit is just the layer that takes care of answering the question "is the caller authorized to do this action". It's not setuid. pkexec is setuid, it gets launched as root, asks polkit, and then does the thing the user asks or exits saying "you're not allowed".