Reply To: pkexec or sudo ?

Forum › Forums › General › Software › pkexec or sudo ? › Reply To: pkexec or sudo ?

#61640
Anonymous

    Robin, most of the antiX utilities are shell scripts, predominantly bash scripts
    and the install destination for nearly all of the antiX tools is /usr/local
    If you use grep to search each directory in your $PATH, especially /usr/local
    you can note that, no, none of ’em employ capsh
    grep -nr capsh /usr/local

    man capsh
    man capabilities
    man capabilties.conf
    man getcaps
    man pam_cap

    firejail (python) pre-installed in antiX Full edition http://firejail.wordpress.com/documentation-2/linux-capabilities-guide/ does support assignment of custom capabilities (and namespaces) for jailed programs. Neither firejail nor any other pythonic app preinstalled in antiX utilizes the python-prctl module, and same (no pre-installed app utilitzes) the analagous perl extension Linux::Prctl.

    If you skim read this linked page (don’t try to soak in ALL the details)
    http://unix.stackexchange.com/questions/364/allow-setuid-on-shell-scripts
    you’ll probably gain a sense of why so few authors of interpreted scripts bother to attempt wrangling capabilities.