Passwordless sudo, SELinux - understanding security logic

[fsflover]

@qubist

It seems to me a good idea someone to update that page, so that it explains better

@adw

The documentation is a community effort, and everyone is welcome to contribute.

@adw

You can read more about how to submit documentation changes here:

How to edit the documentation | Qubes OS

You may also be interested in the documentation style guide:

Documentation style guide | Qubes OS

@qubist

What I read is that she obviously no longer maintains the firm position outlined in the “WTF” document

You should give a link to that if you want this discussion to be on point (I tried but couldn’t find anything by now).

@qubist

if system logs (and other system components) contain additional system-specific information (as they usually do) that may facilitate deanonymization

Isn’t this Issue relevant here? I’m no expert but to me the answer looks the same: anonymity and privacy are only provided by Whonix.

Another relevant discussion:

To 'passwordless-root' or not to 'passwordless-root'?

Would it be more secure to not install ‘passwordless-root’ so in case a Qube get’s hacked, the attacker won’t be able to get root access? Of course the drawback is that whenever we want to install something, we have to type in dom0 qvm-run -u root [template] xterm In other words: what’s more secure… have passwordless-root installed or not? Thanks.