3 ms·
doas I’m surprised ‘doas’ has not been mentioned. It’s essentially a safer version of sudo, created by the OpenBSD folks (and has ports for other OS). https:
by alberth 3y ago
doas
I’m surprised ‘doas’ has not been mentioned.
It’s essentially a safer version of sudo, created by the OpenBSD folks (and has ports for other OS).
https://man.openbsd.org/doas.1 https://man.openbsd.org/doas.1
- somat 3y agodoas still uses the suid mechanism. The whole point of the article was how to escalate permissions without suid.
- rany_ 3y agosshd still needs to run as root for that, this is pointless. Maybe some people think that message passing to a root process is less of an attack surface, but I don't think there's actually a meaningful difference.