Comment by ziml77

1 day ago

> Yes, UAC could be considered as annoyance by some but it's no different than "sudo" on single-user Linux machines and we seemingly have no problems with that (I wish we'd move on past that because it is damn annoying and offers no security benefit).

It was wild to me when I was testing out if I wanted to move over to Linux as my full-time desktop OS how much it was asking for my password. And it didn't even have a mechanism to make it a little less painful such as requesting a short PIN (which I think is a fine option as long as a few incorrect PIN entries forces full password input).

Give your user NOPASSWD if it's really that bothersome. You can also potentially set it up to use a fingerprint reader if you have that hardware.

  • Yep on the terminal that would work... though I still think it should be the default.

    On the other hand I'm not sure NOPASSWD would affect desktop environments - any desktop stuff goes via PolicyKit or whatever the latest systemd iteration is and I doubt it's smart enough to read Sudo's config (and there's an argument it shouldn't - if anything it should be the other way around, a system-wide generic "this is single-user machine, the only user is effectively root anyway" flag that both Sudo and Polkit should obey).

    In both cases yes it's solvable, but I wish it became the default if there are no other interactive user accounts, or at least be easy to configure - if anything, by a simple "don't ask me again" on the permissions popup.