Ubuntu QA:
BlogBrainstormPackage status
Log in
Ubuntu QA
The Ubuntu community has contributed 22700 ideas, 138270 comments, 2629576 votes
Idea sandbox Idea sandbox
Popular ideas Popular ideas
Ideas in development Ideas in development
Implemented ideas Implemented ideas
Idea #15264: make possible to run programs as other user; sandbox

Written by dinar the 5 Nov 08 at 08:28. Category: Security. Related project: Nothing/Others. Status: New
Rationale
if i run gksudo and select user and enter program's command (file name) or if i run command with gksudo -u username command or same with sudo, it does not work, only with console programs (i tried mc and even it has given permission messages.)

(this would be useful for example to run some untrustable programs as "in sandbox" i think, not giving them access to user's files.)

i have found a solution, "new session in a window" (it should be enabled in menu editor in applications/system (and installed before that, maybe)) but it runs whole new desktop session.

it is possible to run programs as root (with "gksudo commandofprogram" in "run application" applet for example) so i think may be it is already possible with some tweaks to run them as other user, i have found some information about that, and tried, but it have not worked.

as ubuntu is tweaked to run programs as root may be it is not hard to make it also possible to run as other users (simply with gksudo or gksudo -u).

27
votes
up equal down
Solution #1: Auto-generated solution of idea #15264
Written by dinar the 5 Nov 08 at 08:28.
Ubuntu Brainstorm was updated in January 2009. Since the idea #15264 was submitted before this update, its rationale and solution are not separated. Please vote accordingly, and if you have the necessary rights, please separate the rationale from the solution. Thanks!
3
votes
up equal down
Solution #2: Embed Plash in Ubuntu
Written by Shady3D the 11 Apr 09 at 08:05.
this is the link http://plash.beasts.org/ also it got GUI with it
2
votes
up equal down
Solution #3: gksudo -w -u Username Befehl
Written by pegasus0378 the 22 Jun 09 at 08:25.
gksudo works, but you need the -w option

Also I would like to see a new entry in the menu like "Run programm as other user..." that does the gksudo -w -u Username Befehl


the same would be usefull in the Run dialog (Alt+F2)

Propose your solution

Attachments
No attachments.


Duplicates


Comments
Eldmannen wrote on the 5 Nov 08 at 13:58
If you like this idea, you might also like another sandbox related idea;
* http://brainstorm.ubuntu.com/idea/1469/

vexorian wrote on the 5 Nov 08 at 14:18
Isn't gksu -u done already? I think you most likely need just a hack to the gnome panel menu.

Emacs23 wrote on the 5 Nov 08 at 17:54
If you need this, you are a quite advanced user. If you advanced user, you better use terminal. If you don't like terminal, you better back to windows ;)

Emacs23 wrote on the 5 Nov 08 at 17:56
And it seems author has no idea about tools Linux already have. So, -1.

dinar wrote on the 5 Nov 08 at 23:11
which tools does it already have? i searched for "run program as other user linux". but have not searched many, and have not found many, only about sudo and gksudo and maybe kdesu.
"If you advanced user, you better use terminal"
i said, even terminal programs does not run perfectly, but i think may be i should specify home folder in command switches-options.
"If you advanced user, you better use terminal"
i want to learn terminal text editor, but what if i want to run browser do you think?

andruk (Idea reviewer) wrote on the 6 Nov 08 at 04:12
@Emacs23: Not everybody admins the same way you do, nor should they. People are different, and like different tools. This is one of them.

+1

dinar wrote on the 6 Nov 08 at 11:13
may be i should search for "sandbox linux".

related idea: http://brainstorm.ubuntu.com/idea/15308/ "I want to start software with limited rights"

i said "but what if i want to run browser do you think?"
may be i want or need to run concrete browser which is graphical. and i do not want to use terminal browsers.

dinar wrote on the 6 Jan 09 at 10:40
"And it seems author has no idea about tools Linux already have."
i have known and i think that you (Emacs23) probably said about apparmor and selinux.


Post your comment