Package: wnpp
Severity: wishlist
X-Debbugs-CC: [email protected]

* Package name : run0-sudo-shim
Version : 1.2.0
Upstream Author : Grimmauld <[email protected]>
URL : https://github.com/LordGrimmauld/run0-sudo-shim
License : BSD-3-Clause
Description : An imitation of sudo, using run0 internally 

run0-sudo-shim attempts to imitate sudo as close as possible, while actually 
using run0 in the back.

run0 does not rely on SUID binaries, which makes it a more secure option. It is 
also included in any systemd-based linux installation.

However, many programs just expect sudo to exist, so a shim is necessary to 
make those programs work.

---

It would be nice for run0 users to run scripts that may hardcode sudo,
as it provides a SUIDless means of privilege escalation with polkit.
However, there is frankly a pretty obvious problem: it requires sudo.
In the light of this particular issue, there exists a shim specifically
for run0 to imitate sudo, unceremoniously named "run0-sudo-shim". It
supports most of the sudo functionality you would expect; there are some
behaviours that are not supported by the shim, however. Debian, while
installing sudo by default, also provides run0 on the mere fact that
systemd does too. This makes security-conscious Debian users, such as
myself, keen on using it instead of sudo for as much as possible.

Reply via email to