Stories
Slash Boxes
Comments

SoylentNews is people

posted by martyb on Monday August 31 2015, @04:29PM   Printer-friendly
from the so-su-me dept.

The Linux Homefront Project reports on Lennart Poettering looking to do away with the good old "su" command. From the article, "With this pull request systemd now support a su command functional and can create privileged sessions, that are fully isolated from the original session. Su is a classic UNIX command and used more than 30 years. Why su is bad? Lennart Poettering says:"

Well, there have been long discussions about this, but the problem is that what su is supposed to do is very unclear. On one hand it’s supposed to open a new session and change a number of execution context parameters (uid, gid, env, …), and on the other it’s supposed to inherit a lot concepts from the originating session (tty, cgroup, audit, …). Since this is so weakly defined it’s a really weird mix&match of old and new paramters. To keep this somewhat managable we decided to only switch the absolute minimum over, and that excludes XDG_RUNTIME_DIR, specifically because XDG_RUNTIME_DIR is actually bound to the session/audit runtime and those we do not transition. Instead we simply unset it.

Long story short: su is really a broken concept. It will given you kind of a shell, and it’s fine to use it for that, but it’s not a full login, and shouldn’t be mistaken for one.

I'm guessing that Devuan won't be getting rid of "su."


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 5, Funny) by Thexalon on Monday August 31 2015, @07:19PM

    by Thexalon (636) on Monday August 31 2015, @07:19PM (#230385)

    Linus' opinion [zdnet.com]

    I don't actually have any particularly strong opinions on systemd itself. I've had issues with some of the core developers that I think are much too cavalier about bugs and compatibility, and I think some of the design details are insane (I dislike the binary logs, for example), but those are details, not big issues.

    So except for the design being insane, the code buggy, and the developers rude and unresponsive to the point where he refuses to merge their code [iu.edu], he has no strong opinions about it. Which to me seems like "Except for that one little incident, how was the play, Mary Lincoln?"

    --
    The only thing that stops a bad guy with a compiler is a good guy with a compiler.
    Starting Score:    1  point
    Moderation   +3  
       Informative=1, Funny=2, Total=3
    Extra 'Funny' Modifier   0  
    Karma-Bonus Modifier   +1  

    Total Score:   5  
  • (Score: 2) by Zz9zZ on Monday August 31 2015, @08:05PM

    by Zz9zZ (1348) on Monday August 31 2015, @08:05PM (#230416)

    Lets not forget that Linus was asked to put backdoors into the kernel: http://falkvinge.net/2013/11/17/nsa-asked-linus-torvalds-to-install-backdoors-into-gnulinux/ [falkvinge.net]

    So he is obviously under pressure to go along with some things, and Thexalon's summary of his "opinion" seems oddly reminiscent of the story I linked.

    --
    ~Tilting at windmills~
  • (Score: 0, Troll) by rtfazeberdee on Thursday September 03 2015, @02:00PM

    by rtfazeberdee (5847) on Thursday September 03 2015, @02:00PM (#231737)

    you obviously didn't read or comprehend Linus's quote