microsoft
Clarify what is happening and who is requesting permissions in the UAC prompt.
No clue how achievable this would be, but if this could somehow show “Requested by Terminal” and maybe a “More Info” button that shows the full command line that’d be great.
I could see this being used as an attack vector against unskilled users who see the prompt and think “yeah, i trust Microsoft with admin permission." and click Yes blindly.
Original prompt (as seen in the documentation):
My suggested revision/alteration:
(obviously my version sucks visually. make it prettier ;) )
If you are changing the UAC popup... There is so much more:
- That Microsoft has signed the
sudo.exeis now irrelevant. - Show the signature of the process to elevate instead.
- Show the full command line to elevate (I don't want to click 'Show more details' every time), so we know which sub-command is being elevated.
- Let me check which process is asking for elevation.
IMO: Enabling Sudo is kind of a new step in the UAC control settings. Integrating Sudo and UAC is the obvious next step.
Potential workaround until UAC is improved: use separate exe for rpc server and sign it with publisher name set to "Unknown".
I really want to work with the UAC folks in the coming months with this. I think this is a great idea.
