backlight_brightness script sudo security

For questions regarding system and application security
Message
Author
imschmeg
Posts: 533
Joined: Thu Sep 12, 2019 8:32 pm

backlight_brightness script sudo security

#1 Post by imschmeg »

A suggestion to the MX devs from a tinfoil-hat wearer: a script like /usr/lib/mx-tweak/backlight_brightness doesn't need to run entirely as root via passwordless sudo ( :eek: ) just to get access to /sys/class/backlight/*/brightness. Instead, give something small that can only write to /sys/class/backlight/*/brightness access via sudo or suid, or just make /sys/class/backlight/*/brightness world writable at boot (or group writable by some dedicated group, then use sgid).

Or use the Debian brightnessctl & brightness-udev packages.

Return to “Security”