On 6/20/23 17:03, Greg Wooledge wrote:
+10,000 Greg. Foisting this change on the users, without fixing the apps it effects, is only driving us users mad and crippling what our macines can do. Synaptic is not the only app it blocks, geany is blocked too, not that I have ever, except for this test, attempted to run geany as root. Like firefox, its big and complex, but unlike gedit has never trashed a file for me, gedit has ruined so many I finally banned it from my machines, all of them.On Tue, Jun 20, 2023 at 04:56:39PM -0400, paulf@quillandmouse.com wrote:Apparently the broader dictum is "never run GUI apps as root". Why? What's special about GUI apps versus those you run in a terminal?The extreme example is a web browser. Your typical web browser probably has thousands of bugs in it. GUI apps are big and complicated. Running them with elevated privileges is just asking for problems. In a sensible design, the GUI part would run as you, and it would send requests to a daemon that runs as root, or simply issue shell commands with "sudo" or something, to do the parts that need extra privs. .
Cheers, Gene Heskett. -- "There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order." -Ed Howdershelt (Author, 1940) If we desire respect for the law, we must first make the law respectable. - Louis D. Brandeis Genes Web page <http://geneslinuxbox.net:6309/>