from Hacker News

Doas – dedicated OpenBSD application subexecutor

by osener on 8/29/23, 9:42 PM with 41 comments

  • by 1vuio0pswjnm7 on 8/29/23, 10:28 PM

    And before there was "doas" there was setuidgid and envuidgid.

    https://cr.yp.to/daemontools/setuidgid.html

    https://cr.yp.to/daemontools/envuidgid.html

  • by 1attice on 8/29/23, 11:53 PM

    I was initially skeptical but the superior simplicity and rigor won me over.

    protip: nixos lets you use doas instead of (or in addition to) sudo. Since i run obsd serverside and nixos on the edge, this works great for me

    programs.doas.enable = true;

  • by e12e on 8/30/23, 1:18 AM

  • by irdc on 8/29/23, 10:22 PM

    For those whose muscle memory is all confused now there's OpenDoas: https://github.com/Duncaen/OpenDoas

  • by tiffanyh on 8/30/23, 5:21 AM

    Off topic:

    Love OpenBSD.

    Wish so much Hammer2 comes to it because OpenBSD innovates so much but their file system is lacking.

    There is an attempt to port DragonflyBDS Hammer2, and hope OpenBSD accepts it.

    Last updated 3-days ago.

    https://github.com/kusumi/openbsd_hammer2

  • by ggm on 8/30/23, 12:42 AM

    is this actually going to wind up stopping Sudo bash or is this "if you use it right you don't need to" which is a euphemism for "yea but everyone does"

  • by BrotherBisquick on 8/30/23, 1:18 AM

    Does doas have equivalents to the -i and -E flags in sudo? I use both of those frequently.

  • by lacoolj on 8/29/23, 10:51 PM

    Am I seeing the page correctly or someone get hacked?

    "that's some bullshit"

    I assume someone just doesn't like that OpenBSD does something other than sudo (which you can actually use either)?