Re: security policy / root passwords

[Ian Jackson <ijackson@chiark.greenend.org.uk>]

Simon McVittie writes ("Re: security policy / root passwords"):
>     * splitting privileged actions into an unprivileged GUI and a
>       privileged daemon, rather than running the GUI with privileges
>       (supported and encouraged by PK, not well-supported by sudo or su)

This gives me another opportunity to plug userv.  userv is a tool for
helping split a local program or service into differently-privileged
parts.  Specifically it's a way of letting one user execute programs
to be run as another user, with appropriate security properties.

Ian.