:AS connection type uses :SU not :SUDO

Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>

1 files changed, 11 insertions, 10 deletions

diff --git a/src/connection/as.lisp b/src/connection/as.lisp
index b5a9f69..6f6edc6 100644
--- a/src/connection/as.lisp
+++ b/src/connection/as.lisp
@@ -24,13 +24,14 @@
   (zerop (foreign-funcall "geteuid" :int)))
 
 (defmethod establish-connection ((type (eql :as)) remaining &key to)
-  "Establish a :SETUID or :SUDO connection to another user account, depending
-on whether it is possible to establish a :SETUID connection.
-
-This connection type does not support sudo with a password -- it is designed
-to be used as root."
-  (if (and (lisp-connection-p)
-           (can-setuid)
-           (can-probably-fork))
-      (establish-connection :setuid remaining :to to)
-      (establish-connection :sudo remaining :user to)))
+  "Establish a :SETUID or :SU connection to another user account, depending on
+whether it is possible to establish a :SETUID connection.
+
+Note that both these connection types require root."
+  ;; An alternative to :SU would be :SUDO or runuser(1), but :SU is more
+  ;; portable.
+  (establish-connection (if (and (lisp-connection-p)
+                                 (can-setuid)
+                                 (can-probably-fork))
+                            :setuid :su)
+                        remaining :to to))