[gentoo-user] Re: escape from i3lock

[Ian Zimmerman <itz@very.loosely.org>]

On 2019-07-11 10:43, Adam Carter wrote:

> > No, it's my way to run things as root, in general.  I distrust su, sudo
> > and friends.
> >
> 
> su is mature, well understood and the standard way of doing things. If you
> had run an extra term in your X session that had been su'd to root, you
> wouldn't be exposing a root shell at the console. Perhaps your distrust of
> su is making you less secure? You might be thinking in absolutes, eg  "su
> is insecure" but its better to think along the lines of "is <some option>
> more or less secure than su?"

I have specific reason for the distrust [1].

Your argument regarding _relative_ security is well taken.  But I still
feel that having the root shell outside of my X session would be more
secure, providing I close the switching hole.

[1]
https://www.openwall.com/lists/owl-users/2004/10/20/6

-- 
Please don't Cc: me privately on mailing lists and Usenet,
if you also post the followup to the list or newsgroup.
To reply privately _only_ on Usenet and on broken lists
which rewrite From, fetch the TXT record for no-use.mooo.com.