Unrestricted Admin Mode
Kicksecure can be configured for unrestricted admin mode.
In this mode, traditional access to privilege escalation tools such as sudo
and pkexec
is possible for the Kicksecure default limited account user
.
Most other operating systems do not even call this "unrestricted admin mode" because they do not come with sysmaint-user-split
by default. In such systems, unrestricted admin mode is implied. However, Kicksecure provides the flexibility to switch between sysmaint-user-split
and unrestricted admin mode depending on your needs.
Starting from Kicksecure version 17.2.8.6
Xfce and above, Kicksecure comes with sysmaint-user-split
by default.
Uninstalling user-sysmaint-split and enabling Unrestricted Admin Mode[edit]
This chapter documents how to disable user-sysmaint-split
and to go back to unrestricted admin mode, where user user
can use sudo
.
Optional. Discouraged.
Warning: Reverting to unrestricted admin mode increases the risk of privilege escalation attacks and may weaken system security.
If user-sysmaint-split
comes installed by default, the easiest to remove it is by using dummy-dependency
to avoid meta package removal issues (Debian Packages).
dummy-dependency --purge user-sysmaint-split
We believe security software like Kicksecure needs to remain Open Source and independent. Would you help sustain and grow the project? Learn more about our 12 year success story and maybe DONATE!