this post was submitted on 10 Nov 2024
215 points (85.5% liked)
Linuxsucks
183 readers
61 users here now
Shit on Desktop Linux and its evangelists here
No evangelizing for Linux
founded 1 month ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Su isn't on windows, and does the exact opposite to restricting filesystem access to a specific subset
su allows you to swap to another user in shell, not just make yourself root.
'runas' looks like it'd do just the job
runas can do that, yes. Now how are you planning yo also create that user in the same command line? And to dispose of it automatically when the process ends?
runas can do that, yes. But it won't make you a virtual file system, or give you a nat firewall.
One use case for this is the backblaze backup utility. It's kinda stupid in that it has an all-or-nothing approach to backups.
Putting it in a container restricts it in a much easier and reliable way than running it with a special user account.