Skip to content

Commit 9fffef0

Browse files
authored
Update README.md (#5)
* Update README.md Fix a phrasing error and adding a link to the ChromeBrew project. * Add Crouton URL Add URL for Crouton: https://github.com/dnschneid/crouton * Remove bad / in URL Remove a bad slash (/) in an added URL
1 parent 6b303bd commit 9fffef0

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

README.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,20 +1,20 @@
11
# crew-sudo
2-
Make `sudo` "works" on ChromeOS `crosh` shell (ChromeOS v117+) by redirecting sudo calls to VT-2 shell
2+
Make `sudo` "works" on ChromeOS `crosh` shell (ChromeOS v117+) by redirecting sudo calls to VT-2 shell.
33

44
## Background
55
On ChromeOS v117, all Chrome-related processes (e.g. the ChromeOS UI) is executed with the `NO_NEW_PRIVS` bit, which means:
66
- `suid/sgid`-bit is blocked, and thus no more `sudo`
77
- This flag will be inherited by its subprocess (including `crosh`) and cannot be unset
88

9-
That benefits security. However, it is bad for Crouton/Chromebrew users.
9+
That benefits security. However, it is bad for [Crouton](https://github.com/dnschneid/crouton)/[Chromebrew](https://github.com/chromebrew/chromebrew) users.
1010

1111
The official workaround for this is using the VT-2 shell (aka `frecon`) [^1], but `frecon` just sucks:
1212
- No clipboard support
1313
- No Caps Lock support
1414
- No HiDPI support
1515
- Poor compatibility with TUI programs
1616

17-
So does there a way to call `sudo` in `crosh` but run it in VT-2? That's what this project does :)
17+
So is there a way to call `sudo` in `crosh` but run it in VT-2? That's what this project does :)
1818

1919
[^1]: `sudo` works in VT-2 because the VT-2 process is independent of the browser process and executed without the `NO_NEW_PRIVS` bit
2020

0 commit comments

Comments
 (0)