3 ms·
Well first I never understood this mentality: "If my main account is compromised, then I lost anything anyway". For those who believe that's true, why not run
by TacticalCoder 3y ago
Well first I never understood this mentality: "If my main account is compromised, then I lost anything anyway".
For those who believe that's true, why not run everything as root? I mean, seriously: why not just run the browser as root?
- PhilipRoman 3y agoIf you're using a personal machine, there is very little you're gaining by not running a browser as root. The security gain is significant on multi-user systems where you don't have sudo/doas privileges at all - even if a user is compromised, the system administrator should not have to worry about it.
- yjftsjthsd-h 3y agoWhy is it not true? What attack are you protecting against? > why not just run the browser as root? Practically, last time I tried Chromium wouldn't let me. But Firefox did, at least. The better answer is that they can use some level of internal sandboxing so that an exploit affecting one part of the browser doesn't make it out of the browser, and AIUI if every part runs as root it's easier to escape that layer of security.
- extraduder_ire 3y agoBecause that makes it super easy to accidentally clobber stuff. IME, sudo has been more of a guardrail against my idiocy and fat-fingers than it has against malware/other users.