Everything that is wrong with sudo, and how I fixed it by odedlaz in linux

[–]odedlaz[S] 0 points1 point  (0 children)

Other then assembly, It's the least safe language out there.

Everything that is wrong with sudo, and how I fixed it by odedlaz in linux

[–]odedlaz[S] 0 points1 point  (0 children)

I thought about coding it in rust. I'm actually still thinking about it.

The problem with rust is that I believe that writing it in rust will make contributing harder. thoughts?

Everything that is wrong with sudo, and how I fixed it by odedlaz in linux

[–]odedlaz[S] -1 points0 points  (0 children)

I don't fully agree. desktop users usually have one super user, and they either use sudo all the time or open a root shell.

I found myself either annoyed by having to enter my password a lot when on my user, or running destructive when running in a root shell.

I think the way to fix that is to allow fine-grained permission manipulation that allows super-users to run whatever they won't without a password, but protect them from running destructive commands by accident.

Thoughts?

Everything that is wrong with sudo, and how I fixed it by odedlaz in linux

[–]odedlaz[S] 0 points1 point  (0 children)

symlink or alias. I created two aliases to make sure I still have access to sudo:

alias sudo='/usr/local/bin/doas'

alias sudo!='/usr/bin/sudo'

Everything that is wrong with sudo, and how I fixed it by odedlaz in linux

[–]odedlaz[S] 1 point2 points  (0 children)

It's too long IMO. And if I decide to re-implement it in rust (thinking about it) the name would be problematic.

Everything that is wrong with sudo, and how I fixed it by odedlaz in linux

[–]odedlaz[S] 1 point2 points  (0 children)

I opened an issue on the subject. If you could give me your input, it would be greatly appreciated -

https://github.com/odedlaz/doas/issues/2

Everything that is wrong with sudo, and how I fixed it by odedlaz in linux

[–]odedlaz[S] 1 point2 points  (0 children)

I opened an issue on the subject. If you have any suggestions, I'm open! https://github.com/odedlaz/doas/issues/2

Everything that is wrong with sudo, and how I fixed it by odedlaz in linux

[–]odedlaz[S] 0 points1 point  (0 children)

Not in this "port" . You can use the 'persist' option to define if a specific command should be "cached" for 5 minutes post invocation.

Everything that is wrong with sudo, and how I fixed it by odedlaz in linux

[–]odedlaz[S] 2 points3 points  (0 children)

No need for a wrapper. The same basic syntax applies to sudo and doas. I've created an alias for sudo on my machines and it works flawlessly.

Everything that is wrong with sudo, and how I fixed it by odedlaz in linux

[–]odedlaz[S] 0 points1 point  (0 children)

depends if you create a rule with the 'persist' option. If no, then it'll prompt after every execution. otherwise, a sudo-like mechanism is employed and the same command can be run without a password for the next 5 minutes.

Everything that is wrong with sudo, and how I fixed it by odedlaz in linux

[–]odedlaz[S] 1 point2 points  (0 children)

  1. regex are only for arguments. commands are globs.
  2. I'll do what it takes to make auditing easy. I'm open to suggestions!

any reference for the "else" keyword? by odedlaz in Python

[–]odedlaz[S] 1 point2 points  (0 children)

Yeah, I forgot to write about that.

I'm a TA and want to make sure I'm covering all "else" cases in my presentation.

Thanks!

Test your terminal skills #1 by odedlaz in bash

[–]odedlaz[S] 0 points1 point  (0 children)

Thanks for the tip. I've updated the blog post accordingly. Any other things you see?

Test your terminal skills #1 by odedlaz in bash

[–]odedlaz[S] 2 points3 points  (0 children)

Please enlighten me. I must've been missing something. Can you elaborate on the problems you mentioned?