2 ms·
Sure, but your choices are running an on-demand binary suid root, or running a persistent daemon as root. Both have problems, but if you're going to switch use
by bandrami 3y ago
Sure, but your choices are running an on-demand binary suid root, or running a persistent daemon as root.
Both have problems, but if you're going to switch users to root you have to do one of them.
- dale_glass 3y agoThe tool doesn't try to do away with root, it tries to do await with the setuid bit. Meaning, "running a persistent daemon as root" is the intentional solution, and presented as the significantly better option for good security.