Sudo is supposed to give you flexibility - being able to perform some commands but not others and similar functionality. I think it achieves that _too_ well by

Sudo is supposed to give you flexibility - being able to perform some commands but not others and similar functionality. I think it achieves that _too_ well by being far too big and featureful. I prefer doas [1] - it gives the user some flexibility, but has a simple config format [2] that doesn't need a quick introduction to Backus-Naur form in its man page. [1] http://man.openbsd.org/doas http://man.openbsd.org/doas [2] http://man.openbsd.org/doas.conf http://man.openbsd.org/doas.conf