News for hackers. Stuff that matters.

A comment on Pwnkit: Local Privilege Escalation in polkit's pkexec (CVE-2021-4034). Parent comment

Re:Pwnkit: Local Privilege Escalation in polkit's pkexec (CV... by michaelmrose on Wednesday January 26, 2022 @04:38AM (#30083518)
> As the sysadmin you can configure some actions to always accept or always deny, if you want

You can do this with sudo too.

[ Parent | on HN ]
Re:Pwnkit: Local Privilege Escalation in polkit's pkexec (CV... by throwawaysysd on Wednesday January 26, 2022 @09:51AM (#30086111)
Yes, polkit does have some overlap with sudo. What it has over sudo is a real API, programs can use it to authenticate an IPC request for an action to a privileged daemon while that daemon is running.
[ Parent | on HN ]