4 ms·
From a security point of view that would be a good idea, or at least making sure you don't need root for everyday tasks. Requiring root to, e.g., install & conf
by codethief 1y ago
From a security point of view that would be a good idea, or at least making sure you don't need root for everyday tasks. Requiring root to, e.g., install & configure applications is a huge antipattern IMO.
- jampekka 1y agoAndroid of course requires root for installing and configuring applications. It just grants the root automatically.
- oneshtein 1y agoDevelopers cannot trust a random phone «owner».
- strcat 1y agoNo, it doesn't. Only a few very core system processes run as root and even those are contained quite a bit via SELinux. The application layer of the OS including installing apps does not run as root or with equivalent access.
- fsflover 1y agoHave a look at https://qubes-os.org https://qubes-os.org to understand why you're mistaken.
- codethief 1y agoI know Qubes. I meant "requiring root to, e.g., install & configure applications is a huge antipattern" on standard Linux distributions, where most people just use sudo in their usual shell, so an attacker merely needs to take over a non-root user account (and their .bashrc) to get root.
- fsflover 1y ago> so an attacker merely needs to take over a non-root user account (and their .bashrc) to get root So if I don't use sudo then the problem with root is solved?