News for hackers. Stuff that matters.

A comment on Run0 – systemd based alternative to sudo announced. Parent comment

Re:Run0 – systemd based alternative to sudo announced by agwa on Tuesday April 30, 2024 @04:14PM (#40215759)
Good news! run0 will use polkit[1], which uses JavaScript for its rules[2], so there's no limit to how complex your rules can get!

On the other hand, maybe adding a JavaScript interpreter to Linux's trusted computing base isn't good news...

[1] https://mastodon.social/@pid_eins/112353420303876549

[2] https://www.freedesktop.org/software/polkit/docs/latest/polk...

[ Parent | on HN ]
Re:Run0 – systemd based alternative to sudo announced by akira2501 on Tuesday April 30, 2024 @04:37PM (#40216026)
If the lesson of xz was "reduce supply chain attack surface" then the freedesktop people clearly haven't received it yet.
[ Parent | on HN ]
Re:Run0 – systemd based alternative to sudo announced by bmicraft on Tuesday April 30, 2024 @09:24PM (#40218506)
Fedora has used PolKit for 12 years now, and the javascript rules have probably been a thing for about as long.
[ Parent | on HN ]
Re:Run0 – systemd based alternative to sudo announced by akira2501 on Wednesday May 01, 2024 @06:08AM (#40221373)
Doctors recommended cigarettes for decades. What should give everyone similar pause is xz was found unintentionally.
[ Parent | on HN ]
Re:Run0 – systemd based alternative to sudo announced by rcxdude on Tuesday April 30, 2024 @06:05PM (#40216997)
It's a heck if a lot better than a random smattering of shared libraries getting pulled into a random high-priviledge context which also inherits some other context from whoever is asking for authentication. Polkit gets a lot of flack but PAM is absolutely mad.
[ Parent | on HN ]