This is great. Not having the attack surface of
sudo
(and not even being a SUID binary) certainly are great additions.And I hope people realize that
systemd
is not one large thing, but a (large) collection of tools.Kinda feels like writing a script that implements the
sudo
CLI but callspkexec
would be an easier way to do it. Given that so many systems already come with bothsudo
andpkexec
, do we really need yet another option?I’ve had to scroll down eight pages to find a post that seems to actually address the good points raised in the article.
This is great. Not having the attack surface of sudo (and not even being a SUID binary) certainly are great additions.
And I hope people realize that systemd is not one large thing, but a (large) collection of tools.
XZ-utils rings a bell ? It was among others Debian wanting to pull in part of a systemd tool into openssh and that almost turned into a world wide disaster :(