Post #1539637
2025-11-21 10:51 UTC
@felixs @funkylab A debugger will be able to attach just fine. I've opened https://github.com/systemd/systemd/pull/39839 to clarify that other processes of the selected user will be able to mess with the empowered session.
So using run0 --empower gives malicious processes a vector to infiltrate the system. But so does sudo -E PATH or using sudo to execute anything in your home directory or using sudo -s, ....
Replies (1)
-
@felixs@chaos.social 2025-11-21 11:22
@daandemeyer @funkylab Thanks for the clarification! I think the documentation update will help clarify when to use and not use this feature :)