• ouch@lemmy.world
    link
    fedilink
    arrow-up
    35
    ·
    8 months ago

    How does systemd-run/run0 handle what /etc/sudoers currently does?

    I’m disappointed in how little technical discussion there is in this thread.

    • chameleon@kbin.social
      link
      fedilink
      arrow-up
      6
      ·
      8 months ago

      Looking at the implementation, it doesn’t really implement sudoers or tools like sudoedit in any way. systemd-run has already been an existing tool for quite some time and this is really just a different CLI for it. That tool asks systemd to make a temporary new service and immediately run it. That, in turn, requires blanket yes/no approval for org.freedesktop.systemd1.manage-units via polkit.

      So with run0, you can either do everything or you can do nothing. In-betweens are just not a thing at the moment. There’s very little new backend code running as root.

      run0 bash should behave very similar to something like systemd-run --uid=0 --gid=0 --wait --same-dir --send-sighup --pty --pipe --collect bash and the majority of those options have been available for quite a while.

    • corsicanguppy@lemmy.ca
      link
      fedilink
      arrow-up
      9
      arrow-down
      11
      ·
      8 months ago

      Systemd has always been about “don’t ask questions or well call you obstructionist and old”.

        • LemmyHead@lemmy.ml
          link
          fedilink
          arrow-up
          13
          arrow-down
          7
          ·
          8 months ago

          Actually no. The thing is just that systemd handles so many things that makes the lives both developers/distro maintainers and users easier, but most of it happens in the background. You can forget about having to learning complexer tools, just do it all via systemd