run0

Run command as root

$ run0 [command]

$ run0 -u [username] [command]

$ run0 -u [username] -g [group] [command]

run0 [-u|--user user] [-g|--group group] [command]

run0 elevates privileges without being a SUID binary. Unlike sudo, it authenticates via polkit and spawns commands through a systemd service, providing better security isolation.
The tool is designed as a more secure alternative to sudo, avoiding the security concerns of SUID binaries while maintaining familiar privilege escalation semantics.

-u, --user _user_

Run as specified user

Run with specified group

Don't prompt for password

Execute on container/VM

Requires systemd 256+. Authentication through polkit. Environment handling differs from sudo. Some sudo features not available.

run0 was introduced in systemd 256 by Lennart Poettering as a secure alternative to sudo. It addresses SUID-related security concerns by using polkit for authentication and service-based command execution.

sudo(8), pkexec(1), doas(1), systemd-run(1)