The real magic word - sh.itjust.works

Systemd v256 Introduces run0: A Safer Alternative to sudo

Lennart Poettering reveals run0 in systemd v256, a fresh take on secure privilege escalation, aiming to phase out traditional SUID binaries.

Linuxiac

I don’t know enough about IT security to understand this.

Does that mean that run0 puts programs in some form of sandbox? What’s the difference now to sudo?

Basically the way sudo and doas work is that they turn your current session into a privileged one, then run the command, then put your session back the way it was, this can cause security issues. The way run0 works is that it just asks systemd to do it for you, removing those security risks.

At least thats the way I understand it, im not an expert