I found a (lengthy) guide to doing this but it is for gksu which is gone. I have to imagine there’s an easy way. I am running Ubuntu.

    • Rustmilian@lemmy.worldEnglish
      0·
      7 months ago

      Polkit was created in 2009 & PAM was created in 1995. GNU dates back to 1984, so… There’s still quite a handful of programs that are likely still maintained to this day that don’t properly take advantage of them or other auth systems made to be able to handle GUIs in a secure fashion. BleachBit being released in 2008, predates Polkit and afaik, bleachbit doesn’t leverage polkit by default, at least not on Arch.

      • bizdelnick@lemmy.ml
        0·
        7 months ago

        Idk what is bleachbit. But I know that “auth systems” can’t “handle GUIs in a secure fashion”. The app itself can be secure or not. By default they are not secure if they provide a GUI running in privileged process.

        • Rustmilian@lemmy.worldEnglish
          0·
          7 months ago

          gksu, kdesu, sux, Polkit, PAM, & GVFS. All of which are privilege elevation frameworks that can securely obtain the required privileges without running GUI applications directly as root. Granted you may need to configure PAM & Polkit’s policies to make them more secure.
          The problem with sudo is that it runs the entire GUI application as Root. These frameworks are the proper way.

          BleachBit is a Linux disk space cleaner thats based on Python, PyGTK, & GTK2. BleachBit never prompts the user for authentication for operations requiring elevated privileges, it just fails with “permission denied”. Inturn you can use sudo, or the by far more recommended and safer options gksudo/gksu , kdesu & pkexec.

          • bizdelnick@lemmy.ml
            0·
            7 months ago

            gksu and kdesu are unsupported for >10 years iirc, they were not more secure than sudo and that’s one of the reasons they were abandoned. I’ve never heard about sux. Polkit is a bit another thing that indeed replaced them, however it does not and can not separate GUI and non-GUI processes. The process itself has to fork, drop privileges and draw a GUI after that. There’s no difference between running it via sudo or pkexec, however polkit provide additional protections to prevent running unsafe apps with elevated privileges.

            PAM and GVFS are not “privilege elevation frameworks” whatever you mean by this.