undefined | Better HN

0 pointsdirewolf203mo ago0 comments

Those are already unprivileged operations, but how does it start the initial process in that terminal with the correct privileges for a different user?

0 comments

charcircuit3mo ago

The kernel could authenticate the user before starting it.

direwolf20OP3mo ago

How does it do that?

charcircuit3mo ago

There are many ways from passkeys to SAML. Though for complex methods we may want a dedicated services outside the kernel.

direwolf20OP3mo ago

How does that service get launched with the privilege to switch to any user?

1 more reply

j / k navigate · click thread line to collapse

0 comments

charcircuit3mo ago

The kernel could authenticate the user before starting it.

direwolf20OP3mo ago

How does it do that?

charcircuit3mo ago

There are many ways from passkeys to SAML. Though for complex methods we may want a dedicated services outside the kernel.

direwolf20OP3mo ago

How does that service get launched with the privilege to switch to any user?

1 more reply

j / k navigate · click thread line to collapse