Item

lrvick · 2026-08-30T17:29:06.000Z

There is. Simply do not install sudo and do not allow access to root at runtime. I am serious. There is absolutely nothing you cannot run unprivileged these days. Can even run sshd from a systemd user unit in your home folder, and even assign port 22 to it if needed with Linux Capabilities.

inigyou · 2026-08-30T18:30:05.000Z

How do you update the kernel?

utopiah · 2026-08-30T19:17:49.000Z

Just don't be in the sudo group.

declan_roberts · 2026-08-30T22:05:51.000Z

So the solution is to make your computer basically unusable. I guess that's one way to secure things.

dist-epoch · 2026-08-30T21:32:57.000Z

But what exactly are you protecting then?

Linux root/regular-user model comes from an ancient time with multi-user architecture where you defended against one user taking over a big machine they didn't own.

But today on personal computers all the good stuff is inside regular users accounts, and there is nothing valuable to be gained by becoming root.

So the whole security model is broken, it protects the OS system files that nobody cares about, while allowing any piece of software complete access to valuable user files.