Systemd v228 local root exploit

Re:Systemd v228 local root exploit by scrollaway on Tuesday January 24, 2017 @07:39AM (#13470828)

> polkit, the systemd replacement of sudo

I honestly do not understand how you can feel comfortable making judgement calls about projects when you cannot even accurately state their function.

[ Parent | on HN ]

Re:Systemd v228 local root exploit by gravypod on Tuesday January 24, 2017 @08:17AM (#13471054)

"Polkit (formerly PolicyKit) is a component for controlling system-wide privileges in Unix-like operating systems."

Calling it the sudo for UIs seems reasonable. It lets you manage the permission level of the UI you're using.

Does it do something else?

[ Parent | on HN ]

Re:Systemd v228 local root exploit by lordlimecat on Tuesday January 24, 2017 @08:31AM (#13471132)

Youre being too generous. GP's statement was,

"Did you know that polkit, the systemd replacement of sudo,"

He calls it a replacement of sudo which is is definitely not.

[ Parent | on HN ]

Re:Systemd v228 local root exploit by ioquatix on Tuesday January 24, 2017 @09:57AM (#13471761)

Uh, so, systemd don't recommend to use `sudo systemctl start blah`. Their idea is to use `systemctl start blah` and have polkit handle the authentication. Not sure what's unclear here.

[ Parent | on HN ]

Re:Systemd v228 local root exploit by jhasse on Tuesday January 24, 2017 @10:16AM (#13471934)

The difference is that with `sudo systemctl ...` systemctl is run as root, but with PolicyKit only parts are. And if I understand it correctly PolicyKit allows more fine grained control over permissions than sudo.

[ Parent | on HN ]

Re:Systemd v228 local root exploit by ioquatix on Tuesday January 24, 2017 @09:35AM (#13471574)

Well, since this was the recommendation from one of the polkit contributors... I'm not exactly sure what you mean. Perhaps you can enlighten me with your wisdom.

[ Parent | on HN ]