Hacker News (curated)new | past | comments | ask | show | jobs| show hidden

Sudo isn't security theater when used for what it was designed for. It's useless for constraining apps you run as your own user ID.


But very few people are using their systems in ways that fit the Unix security model, which was designed for multi-user mainframes with only trustworthy software.

I challenge anyone to name even one thing that requires sudo on a Linux desktop not better handled with systemd user units, Linux Capabilities, rootless docker, etc.

How would you install packages (or update the kernel)?



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact | github