blackstrat 11 points 3 years ago

Why should I use doas instead of sudo? It's not even less typing.

path: 0 686292, hotness: undefined, score: 11, children: 7

zicrons 4 points 3 years ago

It is a much simpler program than sudo. A simpler and less complicated implementation means less vulnerabilities.

sudo had some serious vulnerabilities in the past: https://www.helpnetsecurity.com/...

path: 0 686292 687126, hotness: undefined, score: 4, children: 4

blackstrat 3 points 3 years ago

Can you actually remove sudo from a system without breaking stuff? I can image there's some stuff, scripts etc that depends on it. Unless you can alias it away?

save

path: 0 686292 687126 688053, hotness: undefined, score: 3, children: 3

zicrons 3 points 3 years ago

I use my Linux system without sudo, it does break some (badly written) scripts. You can fix it by either creating a symlink in your path or replacing sudo to doas on those scripts.

But I rarely encounter these issues. Usually system applications won't be affecting by a missing sudo binary, as their privileges are typically managed by polkit or similar.

save

path: 0 686292 687126 688053 688497, hotness: undefined, score: 3, children: 0

knowncarbage 2 points 3 years ago

Depends on the system.

save

path: 0 686292 687126 688053 692218, hotness: undefined, score: 2, children: 0

Redjard 2 points 3 years ago

Used doas for about 4 years now and never had an issue like that. The default config passes environment variables differently to sudo, but after I added the correct setting for that to doas.conf it has been identical to sudo in everything.

If it caused issues for you you could link sudo to doas in bin, no script should ever use sudo -i right?

save

path: 0 686292 687126 688053 1618789, hotness: undefined, score: 2, children: 0

Bjoern_Tantau 3 points 3 years ago

Yeah, I really don't get why one is supposed to be better than the other.

Maybe doas gives you superer user privileges.

save

path: 0 686292 686922, hotness: undefined, score: 3, children: 1

knowncarbage 7 points 3 years ago

sudo is complex with a lot of code and options.

doas is small, simple & secure from OpenBSD.

If all you want is root priv without remembering two passwords on your box, doas is fine. If you want a complex system of admins and users with fine grained permission control sudo may be a better option.

I use ' su -' much of the time and just use a root shell.

Actively replacing sudo with doas on an OS that includes sudo in the base system seems pointless imo.

save

path: 0 686292 686922 687124, hotness: undefined, score: 7, children: 0

knowncarbage 3 points 3 years ago

su ftw!

save

path: 0 686351, hotness: undefined, score: 3, children: 0

Nuuskis 2 points 3 years ago

What other distros than Alpine uses doas by default?

save

path: 0 686172, hotness: undefined, score: 2, children: 2