What's difference between sudo
and gksudo
?
5 Answers
sudo
asks for the password on the command line, and gksudo
pops up a dialog box for it.
-
6gksu(do) also has its own configuration of which environment variables to pass through to the child, separate from su(do)'s own. For example, if your sudoers config specifies !keep_env, the lack of $DISPLAY may prevent graphical applications from running, but gksudo should work. You can find some details at git.debian.org/?p=users/kov/gksu-polkit.git;a=blob;f=common/… or live.gnome.org/gksu . Oct 23, 2010 at 21:55
-
@ephemient So besides the graphical prompt, is
sudo -E
equivalent togksudo
? Feb 26, 2015 at 13:55 -
3
-
4I want to emphasize that this is not the crucial difference at all, and this answer is quite misleading to newbies. The major difference is explained here: askubuntu.com/a/11766/81034 and the answer below (that @johnywhy linked to) goes a step beyond that to add some nuance to that. Please read the askubuntu question rather than relying on this misleading answer.– Sundar RSep 26, 2015 at 13:22
gksudo
is a GTK-based frontend of sudo
(BTW, kdesudo
is a Qt-based frontend), however it (by default) handles more environmental variables(HOME
, XAUTHORITY
, etc.) than sudo
thus making running commands as root safer.
As far as I can see only @Logics answer is correct enough (@Ignacio Vazquez-Abrams's is not complete). Here is the try-to-avoid clarification to @Davros @knitti answer/comments (Please kindly remove/edit them when it's not needed):
- Although both commands are indeed represents
sudo
, the UI used is NOT the only difference of the two commands. - Running GUI program is NOT the only situation when you should use gk/kdesudo, instead you should use gk/kdesudo whenever you can't determine whether the command will create/write files to your home directory (which the
HOME
environment variable points to in thesudo
command in some system and situations). Not all GUI apps writes to your home directory and not all CLI apps don't, so the type of command isn't the key point. - You still can use
sudo
command to launch GUI apps as root (for viewing apps' console output as an example), however you need to handleHOME
(and others such asXAUTHORITY
,DISPLAY
, input-method-related-stuff, etc.) environmental variables correctly so that the launched app won't fail, lose functionality or do really-bad stuff. The following is my current recommendation for usingsudo
sudo -H <rest of the command>
- (from
sudo
section 8 manual page) The-H ( HOME )
option requests that the security policy set theHOME
environment variable to the home directory of the target user (root by default) as specified by the password database. Depending on the policy, this may be the default behavior. - This should at least prevent files being created in
sudo
caller's home directory
- (from
sudo -H DISPLAY=<a working X display name, usually :0> <rest of a GUI program command>
- This should let <GUI program> executed in a TTY terminal and displayed in your desktop environment
- The behavior of the
sudo
command is not identical on all the systems and can be configured throughvisudo
command, please check outsudoers(5)
manpage for more info.
-
2seems a much better explanation than the one that's getting all the votes. more thorough, more correct. even the OP replied "is that all?" to the answer that got all the votes. May 25, 2015 at 17:16
Using regular sudo to run graphical programmes will on a rare occasion mess up permissions on some files. To be safe gksudo (or kdesudo as appropriate) should be used for running programmes with a GUI. I think this is a bug really, although I heard explanations that gksudo understands X server variables and sudo does not possibly leading to problems. Just as a tip; if you are running graphical programmes as root, instead of opening up one terminal for each programme you want to run, type ALT-F2 (alt and function key 2 at the same time), then type in the dialogue box that pops up "gksudo programme" without the quotes and programme replaced by the application you want to run.
sudo runs as the current user with elevated privileges. This has the potential of changing file permissions of certain user config files (relating to your graphical environment) when running graphical apps. You may find errors occurring when running these apps again without sudo.
gksudo (kdesudo under KDE) runs the apps as root user thus any file permissions touched are on root's files, not the users files. running these apps again without gksudo/kdesudo will always have the expected behavior.
The current answer is incorrect. According to the Ubuntu RootSudo wiki:
"You should never use normal sudo to start graphical applications as root. You should use gksudo (kdesudo on Kubuntu) to run such programs. gksudo sets HOME=~root, and copies .Xauthority to a tmp directory. This prevents files in your home directory becoming owned by root. (AFAICT, this is all that's special about the environment of the started process with gksudo vs. sudo)."
-
2There are four other answers; which one is incorrect? Isn't your answer essentially the same as the one by Davros? Apr 17, 2015 at 6:30
-
I was referring to the answer marked as correct. Yes, Davros is saying the same thing, but I added this because his did not contain a link to a source.– artis3nApr 17, 2015 at 16:42
-
1A better solution would be to propose an edit to that answer. Improving an answer is likely to be accepted (+2 rep), whereas essentially duplicating an answer is likely to attract downvotes. Apr 17, 2015 at 16:49