replacing “gksu” and cursing those who waste my time

With “gksu” being phased out of Linux distributions and the recommended replacement – “pkexec” – being so fucked up that you need to create a separate XML file in “/usr/share/polkit-1/actions” for each GUI program you want to run as root, it’s time to improvise.

Since security is a joke for distro maintainers, we might as well join the party and use buggy ol’ “sudo” instead, after configuring it to slightly reduce the attack surface. In “/etc/sudoers” add:
Defaults timestamp_timeout = 0
This will force the damn thing to ask for a password each time it’s being run, instead of remembering it for 5 minutes.

Now set a graphical password-asking program in “/etc/sudo.conf” (you might need to install one first – “x11-ssh-askpass” is ugly as hell, “ksshaskpass” and “ssh-askpass-fullscreen” I haven’t tried because I liked “lxqt-openssh-askpass”):
Path askpass /usr/bin/lxqt-openssh-askpass
Now you can use “sudo -A …” to run graphical programs as root:
sudo -A xfce4-terminal --maximize --working-directory /root --tab --working-directory /root

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.