root with a single command: sudo logrotate

Re:root with a single command: sudo logrotate by fuzzybear3965 on Tuesday October 03, 2023 @11:21AM (#37753103)

I think PolKit can be used to delegate fine-grained control to users. Which other tools are available on Linux to control users' access to fs and network resources? File permissions, systemd-nspawn?

[ Parent | on HN ]

Re:root with a single command: sudo logrotate by spmurrayzzz on Tuesday October 03, 2023 @11:38AM (#37753323)

> Which other tools are available on Linux to control users' access to fs and network resources

selinux is the primary one that comes to mind, it definitely ticks the "fine-grained control" checkbox for sure

[ Parent | on HN ]

Re:root with a single command: sudo logrotate by orange-mentor on Tuesday October 03, 2023 @01:03PM (#37754610)

One could write a very small custom binary in C/C++/Rust that runs the command, and then give that binary setuid permissions. That binary can simply run a subprocess, and nothing else.

[ Parent | on HN ]

Re:root with a single command: sudo logrotate by blibble on Tuesday October 03, 2023 @02:41PM (#37755872)

you could call it "sudo"

[ Parent | on HN ]