Most active commenters
  • zamadatix(3)

←back to thread

466 points CoolCold | 15 comments | | HN request time: 1.231s | source | bottom
Show context
fn-mote ◴[] No.40212557[source]
Overall, this seems great.

However...

> [...] by default it will tint your terminal background in a reddish tone while you are operating with elevated privileges

?!! ouch ... seems orthogonal to the actual important parts.

Disclaimer: I didn't try it.

replies(4): >>40212686 #>>40215695 #>>40219040 #>>40225604 #
NekkoDroid ◴[] No.40212686[source]
I tried it a bit ago (when it was still called uid0, pre-release), I also wasn't a fan of the tinting.

I like the intent behind it, but some terminals already tint the header color when running sudo, I haven't tested if its done specifically for sudo or if its in a more generic way that could handle this as well.

replies(2): >>40212858 #>>40213006 #
1. Karellen ◴[] No.40212858[source]
> I also wasn't a fan of the tinting.

From the linked mastodon thread:

> For example, by default it will tint your terminal background in a reddish tone while you are operating with elevated privileges. That is supposed to act as a friendly reminder that you haven't given up the privileges yet, and marks the output of all commands that ran with privileges appropriately. (If you don't like this, you can easily turn it off via the --background= switch).

(emphasis mine)

replies(3): >>40215782 #>>40215796 #>>40217102 #
2. gh02t ◴[] No.40215782[source]
It was a bit unclear to me from the thread, is there a persistent configuration option for this? I like the idea of tinting the terminal, but I also want to be able to turn it off with a global config option rather than having to type out a --background flag every invocation.
replies(1): >>40215811 #
3. zamadatix ◴[] No.40215796[source]
I think it's more that the default seems backwards than the lack of ability to change it.
replies(1): >>40216064 #
4. zamadatix ◴[] No.40215811[source]
Aliasing the command as the command + your default arguments is the easiest general solution to this kind of problem. I'm not sure if there is a "systemd way" to permanently set it though.
replies(2): >>40216003 #>>40217458 #
5. gh02t ◴[] No.40216003{3}[source]
True, I was thinking a simple environment variable or systemd configurable would be fine but I guess an alias is a good idea.
6. dsr_ ◴[] No.40216064[source]
It's three things:

* here is a feature which we are defaulting to on

* there's no persistent config for it

* we know better than you do about your preferences

replies(1): >>40216974 #
7. zamadatix ◴[] No.40216974{3}[source]
"Defaulting to on" is just a symlink to an existing binary so that's not really much a problem.
replies(1): >>40218213 #
8. deadbunny ◴[] No.40217102[source]
I for one love to type out 13 extra characters to a 4 character command to disable dumb choices by the developer.

On a more serious note, I wonder what random ASCII escape sequences we can send.

replies(2): >>40219371 #>>40221421 #
9. tolciho ◴[] No.40217458{3}[source]
I accidentally compile color support out of st, or set xterm*colorMode:false to avoid seeing the backside of a unicorn randomly rubbed all over the terminal, on account of git and other wares being bad at their inability to not spew color codes. A sensible default would be to set no colors, in the event that the colors are unreadable (due to colorblindness, etc) or distracting, but that ship sailed. Most of my vim config on RedHat linux was disabling wacky vendorisms, and back when I used linux I did have a "special terminal" for some NVIDIA installer that mandated colors to be usable. Maybe the terminal title was set to Fisher-Price, maybe not.
replies(1): >>40222748 #
10. gpm ◴[] No.40218213{4}[source]
A symlink to a binary that I'm going to pass a password to seems like a security bug waiting to happen (just in the manner that any complexity around privilege escalation is a bad idea).
11. BenjiWiebe ◴[] No.40219371[source]
'alias' is your friend.
replies(1): >>40222214 #
12. Karellen ◴[] No.40221421[source]
> I for one love to type out 13 extra characters

FWIW, systemd is normally pretty good at providing autocomplete suggestions, so even if you don't want to set up an alias you'll probably just have to type `--b<TAB> ` to set it.

> I wonder what random ASCII escape sequences we can send.

According to the man page source[0]:

> The color specified should be an ANSI X3.64 SGR background color, i.e. strings such as `40`, `41`, …, `47`, `48;2;…`, `48;5;…`

and a link to the relevant Wikipedia page[1]. Given systemd's generally decent track record wrt defects and security issues, and the simplicity of valid colour values, I expect there's a fairly robust parameter verifier in there.

In fact, given the focus on starting the elevated command in a highly controlled environment, I'd expect the colour codes to be output to the originating terminal, not forwarded to the secure pty. That way, the only thing malformed escapes can affect is your own process, which you already have full control over anyway.

(Happy to be shown if that's a mistaken expectation though.)

[0] https://github.com/systemd/systemd/blob/main/man/run0.xml

[1] https://en.wikipedia.org/wiki/ANSI_escape_code#SGR_(Select_G...

13. deadbunny ◴[] No.40222214{3}[source]
I shouldn't need to alias behaviour that violates the principle of least surprise on every single machine I need to run elevated commands on.
replies(1): >>40222685 #
14. shrimp_emoji ◴[] No.40222685{4}[source]
Eh.

`alias grep='grep --color=auto'`

`alias ls='ls --color=auto'`

It's canon.

15. shrimp_emoji ◴[] No.40222748{4}[source]
Dang. I wish I had the autism to bristle at colors. Think about all the lost hours agonizing over themes! Not feeling the agonizing tension between the fact that cool-retro-term made your terminal into an awesome monochrome CRT but that it's monochrome green so your syntax highlighting is all messed up!

> back when I used linux

What do you use now? :0 BSD? Plan 9???