Re:Pwnkit: Local Privilege Escalation in polkit's pkexec (CV...
by throwawaysysd on Wednesday January 26, 2022 @09:43AM
(#30085977)
If those checks always fail, you've now lost that functionality to do anything requiring elevated permissions and made your system less useful. You could get it back by installing a suid root tool like sudo/doas but that opens the same hole again that elevates these problems from a crash into a CVE.
Re:Pwnkit: Local Privilege Escalation in polkit's pkexec (CV...
by skeptical1 on Wednesday January 26, 2022 @11:04AM
(#30087155)
I don't want or need popup permission prompts. If something needs to run as root, I run it as root from the console, as God intended. In the process I am assuredly avoiding all sorts of potential security vulnerabilities, such as this polkit code which is not installed on my system. Now get off my lawn.
And, honesty, I don’t see how those prompts (or functionality they gate) make the system more useful.