• 0 Posts
  • 24 Comments
Joined 11 months ago
cake
Cake day: July 31st, 2023

help-circle

  • pivot_root@lemmy.worldtoLinux@lemmy.mlSSH as a sudo replacement
    link
    fedilink
    arrow-up
    5
    arrow-down
    2
    ·
    7 days ago

    The problem is that they’re trying to frame it as a better replacement for sudo when it’s really not.

    In some respects, it’s safer by not using a setuid binary. In other respects, it massively increases the surface area by relying on the correctness of three separate daemons: systemd, dbus, and polkitd. If any one of those components are misconfigured, you risk an unauthorized user gaining root privileges.

    With sudo, the main concern is the sudo process being exploited through memory safety bugs since it runs at root automatically.

    Don’t get me wrong, sudo has a lot of stupid decisions and problems. There’s a ton of code in sudo for features that almost nobody uses, and there’s bound to be bugs in there somewhere. It needs to be replaced with something simpler, but run0 is not that.










  • Just because people do it doesn’t mean you should.

    Using a separate SSD and OS might work fine for protecting your data from company monitoring software, but it doesn’t protect company data from your rogue OS. If your company has a dedicated security team, your head will roll when they find out you put the company at risk. And if they don’t, you better hope IT is either apathetic or incompetent.

    It’s not worth the risk of losing your job for being a liability. They might not be able to tell future employers why you are no longer employed with them, but “we would not hire {you} again if given the opportunity” speaks for itself.

    Just buy a removedty laptop and use that.




  • pivot_root@lemmy.worldtoLinux@lemmy.mlSuper weird error, what's happening?
    link
    fedilink
    arrow-up
    22
    arrow-down
    1
    ·
    edit-2
    6 months ago

    You’re welcome to use whatever init system you want, but Systemd solves a lot of the bullremoved problems and limitations that come from init.d init scripts. Systemd also has a lot of its own bullremoved and bloat, but it does an excellent job at actually being an init system and service manager if you know how to properly use it.