Post #2737117
2026-05-21 11:14 UTC
Not if you have an encypted folder etc, with a different password than the user account. That way, is safe even from the root account. The problem here is that the app is a .deb, it doesn’t come as an appimage, and it needs constant updating too. So it’s the main system executable file that I want to make user-authenticating, with a different password than that of the user account.
Replies (1)
-
@mlfh@lm.mlfh.org 2026-05-22 06:25
Nothing at all is safe from the root account, or from any user that can elevate to root. Think of the root account as the system itself - the thing you’re trying to protect may be encrypted and safe at rest if you’ve brought it in from elsewhere, but as soon as you enter a password and decrypt it, you’re handing that password and decrypted data over to a system fully controlled by that root account.