SoylentNews is people
SoylentNews
The Linux Homefront Project reports on Lennart Poettering looking to do away with the good old "su" command. From the article, "With this pull request systemd now support a su command functional and can create privileged sessions, that are fully isolated from the original session. Su is a classic UNIX command and used more than 30 years. Why su is bad? Lennart Poettering says:"
Well, there have been long discussions about this, but the problem is that what su is supposed to do is very unclear. On one hand it’s supposed to open a new session and change a number of execution context parameters (uid, gid, env, …), and on the other it’s supposed to inherit a lot concepts from the originating session (tty, cgroup, audit, …). Since this is so weakly defined it’s a really weird mix&match of old and new paramters. To keep this somewhat managable we decided to only switch the absolute minimum over, and that excludes XDG_RUNTIME_DIR, specifically because XDG_RUNTIME_DIR is actually bound to the session/audit runtime and those we do not transition. Instead we simply unset it.
Long story short: su is really a broken concept. It will given you kind of a shell, and it’s fine to use it for that, but it’s not a full login, and shouldn’t be mistaken for one.
I'm guessing that Devuan won't be getting rid of "su."
(Score: 3, Informative) by Zz9zZ on Monday August 31 2015, @08:25PM
http://www.linuxquestions.org/questions/linux-desktop-74/running-x11-as-root-4175505576/ [linuxquestions.org]
The entire thread disagrees and offers pretty simple workarounds.
Sometimes the fact that it is difficult to do something means the developers need to figure out how to make that happen. Security is a real concern, and it takes some very simple mistakes to open the gates.
For the easiest example, take Android. "Let's make the lives of developers REALLY EASY" they said, and thus it has taken years to implement security controls by default, as mentioned in one of today's articles. Developers could implement whatever permissions they needed. Now they are switching tracks because privacy and security have finally (thanks to a certain hero of the people) become a concern for the general public.
Poettering has solved many issues, and made it easy to accomplish some rather specific tasks, but so far I have yet to see a single comment from the supporters claiming how much easier it is to code now. There were old and crufty systems and place to be sure, but the scope creep is insane... How people can imagine this is ok is beyond me, I guess its because we're in the 21st century now and all those old people didn't even know what they were doing. I can't believe I'm saying this but where are the code hipsters that think the old stuff is still cool? Another few years maybe, after some major bug/privacy scandal?
~Tilting at windmills~
(Score: -1, Flamebait) by Anonymous Coward on Monday August 31 2015, @09:12PM
Funny. Your hero worship does not extend to everyone. "It is important to ME, so therefore it is important to EVERYONE."
Don't be such an arrogant ass.
(Score: 0) by Anonymous Coward on Tuesday September 01 2015, @06:37PM
Thank you echo chamber. May I have another down mod? I'll toe the Party line, Comrade, and dare not speak against the groupthink anymore.