[Gtk-sharp-list] Password popup

Christopher David Howie me at chrishowie.com
Tue Apr 27 11:17:43 EDT 2010


On 04/15/2010 05:41 PM, toogooda wrote:
> I am using Gnome so I asume I use gksu?

Correct.

> If i call it at startup when I then run shell commands I do not need to
> prefix sudo?

If your entire app requires root permissions to run, then yes.  For
example, if the purpose of the app is to alter the system configuration,
this makes sense.

If, on the other hand, only a small feature requires root access then
you should run gksu for the command you need to run for that feature,
when the user accesses that feature.

Search the web for the "principle of least privilege" -- basically,
don't give your app any more privileges than it needs to perform its
task.  Giving it any more increases the amount of damage your app could
do if it has a bug or security vulnerability.

-- 
Chris Howie
http://www.chrishowie.com
http://en.wikipedia.org/wiki/User:Crazycomputers

PGP key:

pub   2048R/CF8338F5 2010-04-14
      Fingerprint: 2B7A B280 8B12 21CC 260A  DF65 6FCE 505A CF83 38F5


More information about the Gtk-sharp-list mailing list