Unrestricted Admin Mode

From Kicksecure
Jump to navigation Jump to search

Kicksecure can be configured for unrestricted admin mode.

In this mode, traditional access to privilege escalation tools such as sudo and pkexec is possible for the Kicksecure default limited account user.

Most other operating systems do not even call this "unrestricted admin mode" because they do not come with sysmaint-user-split by default. In such systems, unrestricted admin mode is implied. However, Kicksecure provides the flexibility to switch between sysmaint-user-split and unrestricted admin mode depending on your needs.

Starting from Kicksecure version 17.2.8.6 Xfce and above, Kicksecure comes with sysmaint-user-split by default.

Uninstalling user-sysmaint-split and enabling Unrestricted Admin Mode[edit]

This chapter documents how to disable user-sysmaint-split and to go back to unrestricted admin mode, where user user can use sudo.

Optional. Discouraged.

Warning: Reverting to unrestricted admin mode increases the risk of privilege escalation attacks and may weaken system security.

If user-sysmaint-split comes installed by default, the easiest to remove it is by using dummy-dependency to avoid meta package removal issues (Debian Packages).

dummy-dependency --purge user-sysmaint-split


We believe security software like Kicksecure needs to remain Open Source and independent. Would you help sustain and grow the project? Learn more about our 12 year success story and maybe DONATE!