Is it necessary for this to run setuid? Could it run as a less privileged user and log to the systemd journal instead?
I've started the process of packing this app as a "snap" for easier installation on a number of distros, but the use of setuid trips up one of the security features of the format.
Is it necessary for this to run setuid? Could it run as a less privileged user and log to the
systemdjournal instead?I've started the process of packing this app as a "snap" for easier installation on a number of distros, but the use of
setuidtrips up one of the security features of the format.