{"slug": "run0", "name": "run0", "category": "terminal", "category_name": "Terminal and shell", "description": "", "recommenders": 4, "commenters": 6, "warners": 1, "score": 2.787, "rising": -1.31, "first": "2026-02-02", "latest": "2026-04-30", "why": "Moved away from sudo to run0, set up some aliases and havent looked back.", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 4, "neutral": 0, "compare": 1, "warn": 1}, "spark": [0, 0, 0, 2, 0, 2, 0, 0, 0, 0, 0, 0], "listed": true, "loved": [], "caveat": "", "short_quote": "Moved away from sudo to run0, set up some aliases and havent looked back.", "kind": "", "icon": true, "domain": "freedesktop.org", "github_repo": null, "official_url": "https://www.freedesktop.org/software/systemd/man/latest/run0.html", "pricing": "", "aliases": ["run0"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 767365378, "item_id": 47960336, "url": "https://news.ycombinator.com/item?id=47960336", "by": "RandomGerm4n", "date": "2026-04-30", "stance": "recommend", "quote": "As an alternative to sudo, su, and pkexec there is for example run0", "excerpt": "That is why we should get rid of setuid binaries. GrapheneOS does not use them and was therefore not affected. On the desktop there is also a project called Secureblue based on Fedora Atomic that is moving in a similar direction and has already eliminated a large number though not all setuid binaries. As an alternative to sudo, su, and pkexec there is for example run0, which is available in distributions using system", "context": "", "use_case": "privilege elevation", "switched_from": "", "story": "Copy Fail \u2013 CVE-2026-31431"}, {"id": 765356912, "item_id": 47834807, "url": "https://news.ycombinator.com/item?id=47834807", "by": "9dev", "date": "2026-04-20", "stance": "recommend", "quote": "I'm referring to run0", "excerpt": "No; I'm referring to run0. See, for example: https://edu4rdshl.dev/posts/new-year-new-sudo-using-systemd-s-run0-as-a-sudo-replacement", "context": "", "use_case": "sudo replacement", "switched_from": "", "story": "Sudo for Windows"}, {"id": 755269777, "item_id": 47204361, "url": "https://news.ycombinator.com/item?id=47204361", "by": "sherr", "date": "2026-02-28", "stance": "recommend", "quote": "another alternative that comes from the Linux/Systemd camp", "excerpt": "There are alternatives to sudo other than the new Rust version here. \"doas\" [1] comes from OpenBSD and is a smaller (LOC) tool, easier to audit and keep secure (supposedly). Also available for Linux. Also \"run0\" [2], another alternative that comes from the Linux/Systemd camp, using \"polkit\" and is similar to \"systemd-run\". [1] https://man.openbsd.org/doas.1 [2] https://www.freedesktop.org/software/systemd/man/257/run", "context": "", "use_case": "", "switched_from": "", "story": "Ubuntu 26.04 ends a 40-year old sudo tradition"}, {"id": 754795216, "item_id": 47174701, "url": "https://news.ycombinator.com/item?id=47174701", "by": "miladyincontrol", "date": "2026-02-26", "stance": "recommend", "quote": "Moved away from sudo to run0, set up some aliases and havent looked back.", "excerpt": "Moved away from sudo to run0, set up some aliases and havent looked back. On an aside, --empower has been a nice recent addition, running privileged commands as the actual calling user rather than root, different effects and not a replacement for all superuser tasks but a useful tool to have.", "context": "", "use_case": "privilege escalation", "switched_from": "sudo", "story": "Sudo-rs enables password feedback by default"}]}], "caveats": [{"label": "", "summary": "", "quotes": [{"id": 759437552, "item_id": 47464847, "url": "https://news.ycombinator.com/item?id=47464847", "by": "kristopolous", "date": "2026-03-21", "stance": "warn", "quote": "Is having something with half a dozen poorly documented interconnected points of failure really that awesome?", "excerpt": "https://man.archlinux.org/man/run0.1.en why does everyone want some obtuse enterprise version of every command? What ever happened to minimalism? Is having something with half a dozen poorly documented interconnected points of failure really that awesome? Is this just elitest job security so that people can feel like they're a linux high priest?", "context": "", "use_case": "", "switched_from": "", "story": "Ubuntu 26.04 Ends 46 Years of Silent sudo Passwords"}]}], "who": [], "tags": [], "use_cases": ["privilege elevation", "sudo replacement", "privilege escalation"], "compared": [{"slug": "sudo", "name": "sudo", "co": 5, "switched_from": 1, "switched_to": 0}], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=47952181", "title": "Copy Fail \u2013 CVE-2026-31431", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=47828853", "title": "Sudo for Windows", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=47464134", "title": "Ubuntu 26.04 Ends 46 Years of Silent sudo Passwords", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=47202508", "title": "Ubuntu 26.04 ends a 40-year old sudo tradition", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=47172951", "title": "Sudo-rs enables password feedback by default", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=46858577", "title": "Todd C. Miller \u2013 sudo Maintainer for over 30 years", "mentions": 1}], "sentiment_by_month": {"2025-11": {}, "2025-12": {}, "2026-01": {}, "2026-02": {"compare": 1, "recommend": 2}, "2026-03": {"warn": 1}, "2026-04": {"recommend": 2}, "2026-05": {}, "2026-06": {}, "2026-07": {}, "2026-08": {}, "2026-09": {}, "2026-10": {}}, "quotes": [{"id": 767365378, "item_id": 47960336, "url": "https://news.ycombinator.com/item?id=47960336", "by": "RandomGerm4n", "date": "2026-04-30", "stance": "recommend", "quote": "As an alternative to sudo, su, and pkexec there is for example run0", "excerpt": "That is why we should get rid of setuid binaries. GrapheneOS does not use them and was therefore not affected. On the desktop there is also a project called Secureblue based on Fedora Atomic that is moving in a similar direction and has already eliminated a large number though not all setuid binaries. As an alternative to sudo, su, and pkexec there is for example run0, which is available in distributions using system", "context": "", "use_case": "privilege elevation", "switched_from": "", "story": "Copy Fail \u2013 CVE-2026-31431"}, {"id": 765356912, "item_id": 47834807, "url": "https://news.ycombinator.com/item?id=47834807", "by": "9dev", "date": "2026-04-20", "stance": "recommend", "quote": "I'm referring to run0", "excerpt": "No; I'm referring to run0. See, for example: https://edu4rdshl.dev/posts/new-year-new-sudo-using-systemd-s-run0-as-a-sudo-replacement", "context": "", "use_case": "sudo replacement", "switched_from": "", "story": "Sudo for Windows"}, {"id": 759437552, "item_id": 47464847, "url": "https://news.ycombinator.com/item?id=47464847", "by": "kristopolous", "date": "2026-03-21", "stance": "warn", "quote": "Is having something with half a dozen poorly documented interconnected points of failure really that awesome?", "excerpt": "https://man.archlinux.org/man/run0.1.en why does everyone want some obtuse enterprise version of every command? What ever happened to minimalism? Is having something with half a dozen poorly documented interconnected points of failure really that awesome? Is this just elitest job security so that people can feel like they're a linux high priest?", "context": "", "use_case": "", "switched_from": "", "story": "Ubuntu 26.04 Ends 46 Years of Silent sudo Passwords"}, {"id": 755269777, "item_id": 47204361, "url": "https://news.ycombinator.com/item?id=47204361", "by": "sherr", "date": "2026-02-28", "stance": "recommend", "quote": "another alternative that comes from the Linux/Systemd camp", "excerpt": "There are alternatives to sudo other than the new Rust version here. \"doas\" [1] comes from OpenBSD and is a smaller (LOC) tool, easier to audit and keep secure (supposedly). Also available for Linux. Also \"run0\" [2], another alternative that comes from the Linux/Systemd camp, using \"polkit\" and is similar to \"systemd-run\". [1] https://man.openbsd.org/doas.1 [2] https://www.freedesktop.org/software/systemd/man/257/run", "context": "", "use_case": "", "switched_from": "", "story": "Ubuntu 26.04 ends a 40-year old sudo tradition"}, {"id": 754795216, "item_id": 47174701, "url": "https://news.ycombinator.com/item?id=47174701", "by": "miladyincontrol", "date": "2026-02-26", "stance": "recommend", "quote": "Moved away from sudo to run0, set up some aliases and havent looked back.", "excerpt": "Moved away from sudo to run0, set up some aliases and havent looked back. On an aside, --empower has been a nice recent addition, running privileged commands as the actual calling user rather than root, different effects and not a replacement for all superuser tasks but a useful tool to have.", "context": "", "use_case": "privilege escalation", "switched_from": "sudo", "story": "Sudo-rs enables password feedback by default"}, {"id": 749799937, "item_id": 46862496, "url": "https://news.ycombinator.com/item?id=46862496", "by": "baggy_trough", "date": "2026-02-02", "stance": "compare", "quote": "has a sudo replacement in recent versions, for those who think sudo might be a bit long in the tooth", "excerpt": "systemd, as might be expected, has a sudo replacement in recent versions, for those who think sudo might be a bit long in the tooth: run0 https://www.freedesktop.org/software/systemd/man/256/run0.html", "context": "", "use_case": "", "switched_from": "", "story": "Todd C. Miller \u2013 sudo Maintainer for over 30 years"}]}