←back to thread

466 points CoolCold | 1 comments | | HN request time: 0.3s | source
1. lrvick ◴[] No.40234671[source]
Between "systemd --user", Linux Capabilities, and containers there is no reason to ever have sudo, or the ability to touch the root filesystem at runtime at all, which should ideally be a signed, deterministic, and immutable image anyway. You can do anything as an unprivileged user these days without risking core system integrity and privilege separation guarantees.

Remember, malware can just alias your sudo command to one that logs your password and piggyback on your next use. If you ever use sudo, then all bets are off on sandboxing malware. Best to not have a ladder to root at all.

Sudo is a crutch for people that have not learned the last 20 years of privilege isolation tech.