undefined | Better HN

0 pointsdirewolf202mo ago0 comments

Those are already unprivileged operations, but how does it start the initial process in that terminal with the correct privileges for a different user?

0 comments

charcircuit2mo ago

The kernel could authenticate the user before starting it.

direwolf20OP2mo ago

How does it do that?

charcircuit2mo ago

There are many ways from passkeys to SAML. Though for complex methods we may want a dedicated services outside the kernel.

direwolf20OP2mo ago

How does that service get launched with the privilege to switch to any user?

1 more reply

j / k navigate · click thread line to collapse

0 comments

charcircuit2mo ago

The kernel could authenticate the user before starting it.

direwolf20OP2mo ago

How does it do that?

charcircuit2mo ago

There are many ways from passkeys to SAML. Though for complex methods we may want a dedicated services outside the kernel.

direwolf20OP2mo ago

How does that service get launched with the privilege to switch to any user?

1 more reply

j / k navigate · click thread line to collapse