<html>
<head>
<base href="https://bugzilla.gnome.org/" />
</head>
<body><span class="vcard"><a href="page.cgi?id=describeuser.html&login=mo.mashi69%40gmail.com" title="thebunnyrules <mo.mashi69@gmail.com>"> <span class="fn">thebunnyrules</span></a>
</span> changed
<a class="bz_bug_link
bz_status_RESOLVED bz_closed"
title="RESOLVED NOTABUG - [wayland] can't run application as root using sudo"
href="https://bugzilla.gnome.org/show_bug.cgi?id=772875">bug 772875</a>
<br>
<table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>What</th>
<th>Removed</th>
<th>Added</th>
</tr>
<tr>
<td style="text-align:right;">CC</td>
<td>
</td>
<td>mo.mashi69@gmail.com
</td>
</tr></table>
<p>
<div>
<b><a class="bz_bug_link
bz_status_RESOLVED bz_closed"
title="RESOLVED NOTABUG - [wayland] can't run application as root using sudo"
href="https://bugzilla.gnome.org/show_bug.cgi?id=772875#c6">Comment # 6</a>
on <a class="bz_bug_link
bz_status_RESOLVED bz_closed"
title="RESOLVED NOTABUG - [wayland] can't run application as root using sudo"
href="https://bugzilla.gnome.org/show_bug.cgi?id=772875">bug 772875</a>
from <span class="vcard"><a href="page.cgi?id=describeuser.html&login=mo.mashi69%40gmail.com" title="thebunnyrules <mo.mashi69@gmail.com>"> <span class="fn">thebunnyrules</span></a>
</span></b>
<pre>(In reply to Emmanuele Bassi (:ebassi) from <a href="show_bug.cgi?id=772875#c5">comment #5</a>)
Emmanuele, you made some really good points in your comments. I used to run
root GUIs until now but after having read this thread, I've decided to avoid it
altogether and installed Midnight Commander and Midnight Commander Editor as
command-line alternatives to GUI based file browsing and text editing while in
root.
That being said, I don't agree with your stance that there are no legitimate
uses for running root privileged GUIs:
- 1) whether you agree with the design principle or not there are GUI apps that
con only be run in root:
- whether it benefits from it or not, gparted needs to be run as root.
that's just the way it was designed. If you run it as user, it will warn you
that most of it's features aren't going to work. It's a small GUI, a 15 year
old project still under active development and it was meant to be run with
admin rights, chances are the code has been fully vetted for admin privilleges
and the risk of using as sudo are minimal.
- synapatic package manager: same thing: designed to be run as root, tells
you to run it as root when run as user, 17 years of active dev, small GUI.
I agree with you that ideal design would be for these apps to run as user and
escalate privelleges when running root OPs but that's the way they were
designed and we should have the ability to run them as root in Wayland without
having to resort to opening them with xhost
bash -c "xhost +SI:localuser:root;pkexec synaptic"
and downgrading our security by running root privileged GUI on a snoop happy
X11 server.
- 2) even people who don't want to run a root privileged GUI may want to have
the option of running GUIs as another user under Wayland (without having to
resort to xhost):
-I've setup a restricted account on my Ubuntu install that doesn't have
reading/access privileges to my home folder, nor does it have access to pkexec,
sudo, gksudo, ksudo, the polkit action folder. The account is used to run
proprietary software that may or may not be well behaved. It would have been
nice to have a wayland equivalent to xhost +SI to run GUI via the restricted
account without having to switch users.</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are on the CC list for the bug.</li>
</ul>
</body>
</html>