Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

sudo granularity

Posted Nov 20, 2009 13:38 UTC (Fri) by rahulsundaram (subscriber, #21946)
In reply to: sudo granularity by rfunk
Parent article: Fedora 12 to remove unprivileged package installation

Precisely, sudo can only do it when they are different executables. Not granular enough. Btw, I am talking about doing it in the graphical interface. Not command line.

(Log in to post comments)

sudo granularity

Posted Nov 20, 2009 14:15 UTC (Fri) by hppnq (guest, #14462) [Link]

Precisely, sudo can only do it when they are different executables.

Not at all, sudo supports program arguments and options.

Btw, I am talking about doing it in the graphical interface. Not command line.

What's the difference?

sudo granularity

Posted Nov 20, 2009 14:28 UTC (Fri) by rfunk (subscriber, #4054) [Link]

Any program that would allow the restrictions you're talking about has to be
designed for it. How hard is it to design it to take different command-line
arguments for the different cases, rather than using some new API?

Sigh. Once again, those who don't understand Unix are doomed to re-invent
it, poorly.

sudo granularity

Posted Nov 20, 2009 16:31 UTC (Fri) by stickster (guest, #40146) [Link]

Thankfully I'm not involved in the design or implementation of PolicyKit, so any lack of clue I have won't be a factor. :-) Are you interested in reviewing the documentation for PolicyKit and bringing your insight to the development list upstream?