Re: ssh -X authentication with sudo
On Wed, Oct 05, 2022 at 10:30:37AM +0100, debian-user@howorth.org.uk wrote:
> > Regarding the following, written by "debian-user@howorth.org.uk" on
> > 2022-10-04 at 13:52 Uhr +0100:
> > >PS as you surmised, I don't really want root ssh access.
> >
> > But you are running GUIs as root??
>
> Yes, I am running a GUI as root. It won't run as normal user.
You seem to have missed the implied criticism and/or incredulity.
Hint: look at the double question mark.
Your clinging to the ridiculous superstition that "direct root access with
a pubkey on a LAN is bad, but sudo is good" while simultaneously running
admin GUIs as root (which is *demonstrably* a bad idea) is unfortunate,
but sadly common.
Switching to ssh -X root@ with a pubkey would actually *improve* your
security, not that you really need a lot of security on your home LAN.
Of course that still leaves you running GUI admin programs as root, which
is something you'll have to wean yourself from at your own pace.
Reply to: