[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Please, don't let sudo be auto-removable



On Wed, 2025-07-30 at 19:55 +0100, Darac Marjal wrote:
> There's an argument that sudo should refuse to uninstall itself (e.g.
> in a prerm script) if the root user doesn't have a password at all.
> That would be a neat trick.

There are many other tools that allow you to run things as root under
certain conditions (doas, pkexec, runc, ssh, etc.).  There is no way
sudo's prerm script can check all possible ways (which would also
include being able to "understand" all possible configurations of each
tool!).


-- 
Jan Claeys

(please don't CC me when replying to the list)


Reply to: