Elektrine lite

← Feed

@daandemeyer@mastodon.social

Post #1539637

2025-11-21 10:51 UTC

@felixs @funkylab A debugger will be able to attach just fine. I've opened https://github.com/systemd/systemd/pull/39839 to clarify that other processes of the selected user will be able to mess with the empowered session. So using run0 --empower gives malicious processes a vector to infiltrate the system. But so does sudo -E PATH or using sudo to execute anything in your home directory or using sudo -s, ....

Replies (1)

  • @felixs@chaos.social 2025-11-21 11:22

    @daandemeyer @funkylab Thanks for the clarification! I think the documentation update will help clarify when to use and not use this feature :)

    Open ##1539638