sydhds
commented
1 year ago - Separate admin user from regular user (no admin/sudo/wheel rights)
- 'regular' user can still do admin stuff using polkit -> can we restrict this?
- https://wiki.archlinux.org/title/Polkit
- https://github.blog/2021-06-10-privilege-escalation-polkit-root-on-linux-with-bug/