kdesu default super-user-command

[Oswald Buddenhagen]

On Thu, Nov 22, 2007 at 07:35:29PM +0100, Thomas Friedrichsmeier wrote:
> On Thursday 22 November 2007, Alexander Neundorf wrote:
> > On Thursday 22 November 2007, Thomas Friedrichsmeier wrote:
> > > I'd like to apply the attached patch (kdelibs/kdesu/). This reverts the
> > > default super user command in kdesu back to "su" from "sudo", and adds a
> > > cmake switch to change the default to "sudo".
> >
> > Why does that need to be done at compile time ?
> > Wouldn't reading that from a config file be good enough ?
> 
> There is a - well-hidden - runtime configuration option for this.
>
oh, that's fine then.
commit, as far as i'm concerned.

> On su vs. sudo: Note that kdesu - in it's current implementation - pretty much 
> defies the entire logic behind sudo (except for that you don't need the root 
> but your own password). That's because internally the command that is run is 
> always "kdesu_stub", which then calls the real command. So, with kdesu it's 
> the same all or nothing you get with su, modulo the password needed to access 
> it.
> 
errm, no. in sudo you can also specify which command line arguments to permit.

> (But that's the problem with sudo, anyway, in practice, no? Defining
> what exactly a user may do with admin-priviledges. May work ok for
> starting/stopping some daemons,
>
RTFM ;)

> but what if you want to install something?)
> 
if you allow *that*, you can allow anything.

-- 
Hi! I'm a .signature virus! Copy me into your ~/.signature, please!
--
Chaos, panic, and disorder - my work here is done.