Hacker GitHub

← All repos

Duncaen/OpenDoas

View on GitHub ↗ ★ 757 C

A portable fork of the OpenBSD `doas` command

16 mentions on Hacker News by 12 people: 1 story, 15 comments · first 2021-02-01 · latest 2025-05-07

Mentions per year 16 mentions · busiest year 2023 (12)
20082026
  1. Both implementations of doas for Linux have (the same) unfixed security issue: - https://github.com/Duncaen/OpenDoas/issues/106 - https://github.com/slicer69/doas/issues/110 I have a hard time recommending doas over sudo on Linux when the…
  2. Do you use doas on Linux? It is not protected against tty pushback attack: https://github.com/Duncaen/OpenDoas/issues/106 That's a pretty severe unsolved security issue.
  3. OpenDOAS has actually had the OpenBSD-specific code removed ( https://github.com/Duncaen/OpenDoas/commit/74449f015ff7a7230... ), and replaces some of the doas mechanisms that rely upon OpenBSD to work with sudo-like flag files and…
  4. …linux doas does not timeout, try updating it? 1. http://man.openbsd.org/tty.4#TIOCSETVERAUTH 2. https://github.com/Duncaen/OpenDoas/blob/master/timestamp.c
  5. For those whose muscle memory is all confused now there's OpenDoas: https://github.com/Duncaen/OpenDoas
  6. Sorry, I meant to link to https://github.com/Duncaen/OpenDoas instead of https://github.com/nholstein/OpenDoas . Thank you for correcting my mistake.
    comment by networked · 2023-08-27 · in Portable OpenBSD vi for Unix systems
  7. …The awesome-openbsd repo only links to the Duncaen OpenDoas repo: https://github.com/Duncaen/OpenDoas
    comment by CameronNemo · 2023-08-27 · in Portable OpenBSD vi for Unix systems
  8. …had great success with OpenBSD's doas. It has been ported to every Linux distro I know of as well: https://github.com/Duncaen/OpenDoas
  9. …between sudo and doas which require doing things slightly differently to achieve the same effect. * https://github.com/Duncaen/OpenDoas/issues/116#issuecomment-...
    comment by JdeBP · 2023-06-16 · in Doas Mastery (2016)
  10. …copied in from sudo for things like timeout flag files. * https://github.com/slicer69/doas * https://github.com/Duncaen/OpenDoas
    comment by JdeBP · 2023-06-16 · in Doas Mastery (2016)
  11. …here is the timestamp code. probably a user space version of what openbsd doas does in the kernel. https://github.com/Duncaen/OpenDoas/blob/master/timestamp.c So linux doas is trying to do something. Note that per that mail post I found…
    comment by somat · 2023-06-15 · in Doas Mastery (2016)
  12. Why not port https://github.com/Duncaen/OpenDoas to rust instead? If the goal is security, then there is more to it than just using a memory safe language. Otherwise the result of this, possibly unwittingly, seems performative.
  13. …matter on OpenBSD, because OpenBSD does not have these features. But Linux does, so not ideal. https://github.com/Duncaen/OpenDoas/issues/106
    comment by hannob · 2023-04-26 · in Bringing Memory Safety to sudo and su
  14. …all — it's simply not necessary. Some of the others use the lightweight doas ported from OpenBSD: https://github.com/Duncaen/OpenDoas
    comment by 5e92cb50239222b · 2022-11-07 · in Migrate from Linux to FreeBSD
  15. …I usually redirect them to Qubes OS [3]. [0] https://bedrocklinux.org/faq.html#security . [1] https://github.com/Duncaen/OpenDoas/releases/tag/v6.8.1 [2] https://github.com/bedrocklinux/bedrocklinux-userland/issues... [3]…
    comment by ParadigmComplex · 2021-02-01 · in Bedrock Linux – a meta Linux distribution