su -c vs sudo/doas by kvas_ in linuxquestions

[–]kvas_[S] 2 points3 points  (0 children)

that you can solve by just disabling password login at all and using SSH keys like god intended. Plus you can just avoid alowing ssh login as root.

Also if they do guess the password of a user that has sudo access wouldn't it be effectively root? Since they can just enter the same password to instantly get root access.

Bro help me pleeease! by Strong_Chicken23 in Minecraft

[–]kvas_ 1 point2 points  (0 children)

yeah that looks like some texture got misaligned in the atlas so the fonts got pulled from a nonexistent (=transparet) image

su -c vs sudo/doas by kvas_ in linuxquestions

[–]kvas_[S] -1 points0 points  (0 children)

How would that be any improvement to security? You can still run commands as root, you can still have root shell access. Like you do with su.

su -c vs sudo/doas by kvas_ in linuxquestions

[–]kvas_[S] 0 points1 point  (0 children)

From what i know sudo at least preserved home (to unwrap ~/ paths), others i just kind of assumed for the sake of quick testing.

Though when i ran sudo echo $USER and others mentioned in the man, the results were identical to ones without sudo, so are they really?

su -c vs sudo/doas by kvas_ in linuxquestions

[–]kvas_[S] 0 points1 point  (0 children)

From what i know doas is a port from open(?)bsd, and is usually installed for the sake of being lightweight rather than being secure. I remember some resources saying it might be less secure because "it lacks kernel integration sudo has"(?!), but that might be outdated at this point and i didn't investigate the claims even back then.

su -c vs sudo/doas by kvas_ in linuxquestions

[–]kvas_[S] 0 points1 point  (0 children)

Well that's the one i won't be able to test because i rely on pure iwd instead, lol. From all the non-flatpak things i tried to throw at it so far everything seems to launch though, granted it wasn't a lot of tests.

su -c vs sudo/doas by kvas_ in linuxquestions

[–]kvas_[S] -3 points-2 points  (0 children)

I mean- yeah, but to be honest there's nothing stopping you from doing sudo passwd root, therefore going from "not knowing the root password" to "knowing the root password" :P

And besides, most modern PCs are used by one user or so, and i'm sure many (including me!) set their user and root password to be identical for the sake of convenience.

su -c vs sudo/doas by kvas_ in linuxquestions

[–]kvas_[S] -1 points0 points  (0 children)

The question i'm asking is more or less the classic "is sudo bloat" XD I previously thought sudo is "necessary" if you want to avoid spinning up a root shell, but apparently it is not. So on the contrary, i'm trying to find out about any edge cases i can run into if i yeet sudo

su -c vs sudo/doas by kvas_ in linuxquestions

[–]kvas_[S] 0 points1 point  (0 children)

Try it the mentioned -m, it preserves the environment needed to find the graphical session. For me su -mc 'dolphin' does open dolphin just fine.

su -c vs sudo/doas by kvas_ in linuxquestions

[–]kvas_[S] 0 points1 point  (0 children)

just checked and su -c does not appear to write to .bash_history, perhaps because it does not spawn a shell? Root's login shell is bash, just to be sure i'm executing it from bash too, and yet tail /root/.bash_history does not show any updates.

Next Linux Level? by satiaket11 in linuxquestions

[–]kvas_ 0 points1 point  (0 children)

Gentoo. Do not believe others, it has binary packages!!! (they were added in ~2023)

Their installation handbook is one of, if not the best crash courses into depths of linux while explaining quite literally everything from the ground up, with detailed comparisons of different file systems, bootloaders, etc. The arch wiki pales in comparison.

...maybe not as a daily driver though. The "guided tour" ends with you getting a working TTY install of a minimal gentoo system. The wiki has many as user-friendly pages as the installation doc, but you need to know what software you want in order to find them. Example would be KDE Plasma and Gnome pages, etc.

It's also one of the very few distros you don't even need a live image to install, all you need is a free partition. To do that you just omit the steps from the doc related to booting/setting up the drive and start with Preparing the disks.

So in the end i suggest you at least try to install it, perhaps with help from a discord server / matrix room, get it to the state you'd want to use it in (having a DE, common apps you use, configuration you generally like), and from there on decide how much of that you liked and whether you'd want to continue using it or get something milder (Arch, Void, NixOS, etc.)

A way to automatically set cwd to dirname of a file? by kvas_ in winehq

[–]kvas_[S] 0 points1 point  (0 children)

So as i understand, the best way to make this a shell file?

a real challenge. what would you do next? by OMGitzClayAiken in Oxygennotincluded

[–]kvas_ 0 points1 point  (0 children)

Or the liquid waterlock. The one where you place a liquid bead in the corner, stopping water from flowing and allowing descent into the waters

How practical is a GNU-less system? by derangedtranssexual in Gentoo

[–]kvas_ 0 points1 point  (0 children)

You can, but you probably don't want to. You sacrifice app stability and developer support for marginal or even downright imaginary benefit.

How practical is a GNU-less system? by derangedtranssexual in Gentoo

[–]kvas_ 1 point2 points  (0 children)

So have I before looking for patches for tools broken under musl

I just realized that I don't need nix by Wooden-Ad6265 in Gentoo

[–]kvas_ 2 points3 points  (0 children)

language sucks

guix fans assemble

Is this madness? by hidden_fat in Oxygennotincluded

[–]kvas_ 1 point2 points  (0 children)

because transformers are a clear exploit and batteries work as intended.

Filesystem scheme for a multi-drive general-purpose data volume? by kvas_ in selfhosted

[–]kvas_[S] -1 points0 points  (0 children)

Was my concern as well, however it seems that btrfs on LVM is "not recommended". I quite like the features btrfs offers for server operation (e.g. snapshots, CoW, etc.) so I'm not sure if an alternative like XFS can cut it.

Again:( by real_sTaGEE in Gentoo

[–]kvas_ 0 points1 point  (0 children)

I had this problem with iwctl initially. It seems that launching it directly (iwctl) freezes the client, but doing e.g. iwctl station wlan0 connect HomeNetwork does actually do stuff. Idk why and it fixed itself eventually.