Re:Systemd v228 local root exploit
by lordlimecat on Tuesday January 24, 2017 @08:31AM
(#13471132)
Youre being too generous. GP's statement was,
"Did you know that polkit, the systemd replacement of sudo,"
He calls it a replacement of sudo which is is definitely not.
Uh, so, systemd don't recommend to use `sudo systemctl start blah`. Their idea is to use `systemctl start blah` and have polkit handle the authentication. Not sure what's unclear here.
The difference is that with `sudo systemctl ...` systemctl is run as root, but with PolicyKit only parts are. And if I understand it correctly PolicyKit allows more fine grained control over permissions than sudo.
Calling it the sudo for UIs seems reasonable. It lets you manage the permission level of the UI you're using.
Does it do something else?