This sounds good in theory, but in practice it doesn't work. You always end up w... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		cyberax 23 days ago \| parent \| context \| favorite \| on: Capsudo: Rethinking sudo with object capabilities This sounds good in theory, but in practice it doesn't work. You always end up with an object that has all the privileges.

rurban 22 days ago [–]

Which is a well known anti-pattern. https://en.wikipedia.org/wiki/God_object

lucketone 22 days ago | [–]

That one seems unrelated with OS security model and root account. (One must squint really hard to see root and oop god object as same)

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact