Linux
Welcome to c/linux!
Welcome to our thriving Linux community! Whether you're a seasoned Linux enthusiast or just starting your journey, we're excited to have you here. Explore, learn, and collaborate with like-minded individuals who share a passion for open-source software and the endless possibilities it offers. Together, let's dive into the world of Linux and embrace the power of freedom, customization, and innovation. Enjoy your stay and feel free to join the vibrant discussions that await you!
Rules:
-
Stay on topic: Posts and discussions should be related to Linux, open source software, and related technologies.
-
Be respectful: Treat fellow community members with respect and courtesy.
-
Quality over quantity: Share informative and thought-provoking content.
-
No spam or self-promotion: Avoid excessive self-promotion or spamming.
-
No NSFW adult content
-
Follow general lemmy guidelines.
view the rest of the comments
Doesn't Ubuntu disable the root user out of the box and expect these actions to be performed via sudo/polkit. There is clearly a precedent for not needing a root password and being able to use your own user's password for these kinds of things. So it is a monumentally stupid idea to require the system-wide root password, but not one that is done by all of linux, and seems to be a decision made by your distro to not use the modern solution.
The fact is though, you're right and the pain point is that distros are still doing things the silly way.
If I can
sudo apt installwithout requiring a password, I could generate a package that installs a custom sudoers config file that allows me to do anything, so "passwordless sudo, but just for apt" is potentially easily exploitable to gain full access. But that also still assumes A) you care and B) someone has access to your account anyway (at which point you may already have bigger problems)