[Container-tools] Security vs. Usability: atomic commands and permissions

Brian (bex) Exelbierd bex at pobox.com
Wed Mar 2 13:16:22 UTC 2016


On 02/27/2016 03:15 AM, Josh Berkus wrote:
> Folks,
>
> So I'm testing the new atomicapp tutorial documentation, and one thing
> I'm running across as a major usability issue for Linux desktop
> developers is that most of the commands require sudo, and create files
> which are owned and editable only by root.  Which means that I can't
> easily pull, fork and modify Nulecule applications for my own use in my
> text editor of choice (Atom, for example).

Could we clean this up by setting files we expect to be edited to being 
owned by the user?  I realize that creates a secondary security issue, 
but it would ease the workflow.  We aren't talking about a production 
situation here ...

Ideally it would be nice to see privileges only used where they are 
really needed.

regards,

bex




More information about the Container-tools mailing list