site  contact  subhomenews

Electron ignores suid on binaries

June 28, 2023 — BarryK

Oh <insert expletive here>!

Balena Etcher is an Electron-based app. I posted that have removed it from the AppImage Installer:

However, still experimenting with it, some error messages on the terminal at startup. Then I made an awful discovery:

I am developing a strong dislike of sandboxed apps. Flatpaks, Electron, they are doing it, and making life difficult. I'm feeling that the whole approach of individual sandboxes is fundamentally wrong.

Anyway, in the case of Etcher, a binary such as /usr/bin/sudo, with setuid bit set, is not run as root. Instead it is run as user "etcher". Which defeats the whole purpose of sudo. Or, in the case of EasyOS, the binary is 'sudo-sh'.

The sandbox developer is overriding what distro developers want. So, I'm annoyed. Extra annoyed because "--no-setuid-sandbox" is also ignored.     

Tags: easy