Re:Capsudo: Rethinking Sudo with Object Capabilities
by ryukafalz on Friday December 12, 2025 @07:55PM
(#46250889)
If I'm a user who's been given access to run such a wrapper script via sudo, how do I further delegate that access?
[ Parent
| on HN ]
Re:Capsudo: Rethinking Sudo with Object Capabilities
by LiamPowell on Friday December 12, 2025 @08:05PM
(#46250955)
You can probably use a copy of sudo owned by a non-root user, but I can't say I've ever tried that. You can also just write another setuid shell script.