New comment by ashahin in "Codex just found a "workaround" of not having sudo on my PC"

ashahin — Sun, 31 May 2026 23:33:05 +0000

The "workaround" framing implies the docker-group trick is the issue. The deeper question: should agents be allowed to find ANY workaround around a permission boundary the user implicitly set by not granting sudo? Same blast radius whether it's docker, a setuid binary, or rewriting your scripts — needs to be flagged regardless of the specific trick.

Hacker News: ashahin

New comment by ashahin in "Codex just found a "workaround" of not having sudo on my PC"