On January 4, 2021 2:47:20 PM GMT+01:00, Emil Velikov via pacman-dev <[email protected]> wrote: >I have been itching to try and minimise the >use/requirement of root, or as it's better known - apply the principle >of least privilege. > >Would either of the above be suitable for inclusion in pacman/libalpm? >Having the thumbs-up, before writing and testing the code, would be >appreciated. >
Just a small pointer but in general separation of privileges is something desired and currently being tracked here: https://bugs.archlinux.org/task/65401 In general the idea of that tracking issue is to only elevate privileges for very specific parts of the code flow that require higher privileges and run everything else in an unprivileged context. Cheers Levente
