Hacker News new | ask | show | jobs
by charcircuit 414 days ago
>"Being root" is just another name for the last option.

No, it's not. Take for example ping. If we want users to be able to always be able to use ping does that mean they need to be root? No, it doesn't. A privileged part of the OS can handle doing the raw socket and the unpriviledged user can talk to that part of the OS.

The key point is that some operations that require privileges are okay to expose to a user, but giving the user privileges for everything is dangerous.

1 comments

Examples please? Modern desktop OSes are pretty good at exposing safe operations to users so that no "sudo" is required.