Systemd, the popular service manager, is rolling out a new tool called run0 as a secure alternative to sudo. With run0, users can temporarily and interactively acquire elevated or different privileges without the need for SUID. This provides additional security measures and helps in removing certain classes of attacks.
The problems with sudo are well-known, and Lennart Poettering, the creator of systemd, highlights them in a recent post. He introduces run0 as a solution that addresses these issues. One of the key advantages of run0 is that it allows the service manager to invoke commands or shells under the target user’s UID without being SUID.
Run0 also provides isolation and enhances security by creating an isolated exec context for privileged operations. It has additional features like tinting the terminal background to indicate elevated privileges. This makes it easier for users to visually identify when they are operating with elevated privileges.
With run0, systemd is aiming to provide a reliable and secure alternative to sudo. As the tool is being rolled out, it is expected to gain popularity among users who prioritize security and want additional measures to protect their systems.

Collections

Systemd introduces run0 as a secure alternative to sudo, addressing the well-known problems with sudo. Run0 provides additional security measures, isolation, and visual cues for elevated privileges.

Introducing run0: A Secure and Convenient Alternative to sudo

How do I install run0 on my WSL Ubuntu machine?