aura icon indicating copy to clipboard operation
aura copied to clipboard

aura 4.0 does not de-escalate sudo / warn about it

Open ultimatespirit opened this issue 1 year ago • 1 comments

With aura 4.0 it is no longer necessary to prepend sudo to an aura invocation, as it was before. Instead aura detects when it should or should not use sudo, according to the manual.

Unfortunately, it appears this does not extend to aura detecting if it was used with sudo, for example by someone used to the prior versions or otherwise used to sudo pacman -S. Instead it goes ahead and it seems uses makepkg as root, or at least some configuration steps, as I had packages failing to build from attempting to access paths that it clearly should not have been (like thinking its $HOME was /).

Probably aura should now just refuse to run with sudo (maybe have an override option), or intelligently de-escalate the sudo immediately.

ultimatespirit avatar Aug 02 '24 05:08 ultimatespirit

Thanks for the report, I will think about how best to approach this.

fosskers avatar Aug 02 '24 06:08 fosskers

This is now a priority.

fosskers avatar Sep 08 '24 20:09 fosskers

Thanks for fixing it! Though, looking at the commit seems you went with the "just don't let it be run with sudo" option, and going off the latest issues in the tracker seems you're getting the good ole xkcd 1172. Best of luck with that one haha :)

ultimatespirit avatar Sep 17 '24 08:09 ultimatespirit