Skip to content

GitLab

  • Projects
  • Groups
  • Snippets
  • Help
    • Loading...
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
Dolphin
Dolphin
  • Project overview
    • Project overview
    • Details
    • Activity
    • Releases
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 5
    • Issues 5
    • List
    • Boards
    • Labels
    • Service Desk
    • Milestones
  • Merge Requests 21
    • Merge Requests 21
  • CI / CD
    • CI / CD
    • Pipelines
    • Jobs
    • Schedules
  • Operations
    • Operations
    • Incidents
    • Environments
  • Analytics
    • Analytics
    • CI / CD
    • Repository
    • Value Stream
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Members
    • Members
  • Collapse sidebar
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
  • System
  • DolphinDolphin
  • Merge Requests
  • !43

Open
Opened Aug 05, 2020 by Nate Graham@ngraham🔩Developer
  • Report abuse
Report abuse

Re-allow running the app with sudo

  • Overview 4
  • Commits 1
  • Changes 2

Three years ago, dolphin was prevented from being run with sudo or as the root user in 0bdd8e0b. The justification was to protect users from a security threat described in utilities/kate@9adcebd3.

Since then, we have received a large number of user complaints. We have always told them the same thing: that they won't need to run dolphin with sudo anyway once PolKit support for KIO is merged, as it was for Kate.

Unfortunately PolKit in KIO never got merged. It remains stuck, three years later. See frameworks/kio!143 for the latest status. So we are in the situation where we took away a feature before its replacement was ready, and then we repeatedly promised that the replacement would be ready soon, and it never was.

This represents a severe breach of trust for our users. I know that running Dolphin with sudo is not something anybody recommends, but taking away the feature before its replacement was ready using the justification that we were protecting users from themselves is something that I can totally understand people being upset about. Deleting the threatened feature is not an appropriate way to resolve a security threat. Linus Torvalds feels similarly: https://lkml.org/lkml/2017/11/21/356

Accordingly, this reverts the commit to disallow running Dolphin with sudo. Once PolKit in kio is merged, we can revert this commit and dis-allow it again before its replacement is actually released and available.

This only applies to X; on Wayland all GUI apps are already unconditionally prevented from running as the root user at the compositor level.

Edited Nov 15, 2020 by Méven Car
Assignee
Assign to
Reviewer
Request review from
None
Milestone
None
Assign milestone
Time tracking
Reference: system/dolphin!43
Source branch: re-allow-running-dolphin-with-sudo