🥺: the best sudo replacement

Post by arp242 » Sat, Jan 21, 2023, 5:21 PM UTC

accrual wrote: post #401

MobiusHorizons wrote: post #396

I feel obliged to mention doas[1], which is a sudo alternative from openBSD. It is written in c, but tries to be smaller and easier to configure. I am not qualified to vouch for or against it, but it is interesting. 1: https://man.openbsd.org/doas

I noticed and enjoy that both sudo and doas use each side of a standard qwerty keyboard to type, though doas uses 3 keys on the left while sudo has two on the left and two on the right. It made the transition a little easier for my muscle memory.

  # Toggle "doas" at the start.
  toggle-doas() {
      [[ "${BUFFER:0:4}" = "doas" ]] &&
          {CURSOR+=-5; BUFFER="${BUFFER:5}";} ||
          {BUFFER="doas $BUFFER"; CURSOR+=5;}
  }
  zle -N toggle-doas toggle-doas && bindkey '^s' toggle-doas

Post by varajelle » Sat, Jan 21, 2023, 5:28 PM UTC

xg15 wrote: post #493

varajelle wrote: post #445

Earlier quoted context omitted.

I was thinking the same. But then I thought about it more and wondered why you need to enter your own password if you're already logged on. If an attacker is already in the system, it can install key logger and whatnot without the root password. And the xn--ts9h program can have the Unix permission so that only the user can run it.

There is the mental function signalling "hang on, you're about to do something unsafe. Are you sure you want to do this?" But I think there are some scenarios where it serves a practical security purpose as well: - You're in an office, went away to grab a coffee and left the screen unlocked (bad!). Without sudo, a malicious person could indeed quickly install a backdoor or keylogger and take over your system. - you'r…

Post by arp242 » Sat, Jan 21, 2023, 5:37 PM UTC

dgb23 wrote: post #459

arp242 wrote: post #380

Earlier quoted context omitted.

Ah yes, because every joke becomes better when you announce that it's a joke.

I dislike it too. It’s typically unnecessary on hn because it’s well moderated and people often seem nice even when passionately disagreeing. But on the wider internet everyone assumes you’re stupid. So the “/s” becomes a safety measure. Also read once that it’s an accessibility thing. But I’m not sure if that’s true.

Post by uglycoyote » Sat, Jan 21, 2023, 6:43 PM UTC

arp242 wrote: post #516

dgb23 wrote: post #459

Earlier quoted context omitted.

I dislike it too. It’s typically unnecessary on hn because it’s well moderated and people often seem nice even when passionately disagreeing. But on the wider internet everyone assumes you’re stupid. So the “/s” becomes a safety measure. Also read once that it’s an accessibility thing. But I’m not sure if that’s true.

Usually the majority gets it. And the worst that can happen is that some people will downvote you, or call you an idiot. I'm not especially concerned about this. I don't see how it's an accessibility issue, except to help out those with a deficient sense of humour.

Post by CJefferson » Sat, Jan 21, 2023, 7:47 PM UTC

account-5 wrote: post #449

varajelle wrote: post #445

Earlier quoted context omitted.

I was thinking the same. But then I thought about it more and wondered why you need to enter your own password if you're already logged on. If an attacker is already in the system, it can install key logger and whatnot without the root password. And the xn--ts9h program can have the Unix permission so that only the user can run it.

Insider threat, attacker not in the system, you leave your terminal unlocked and are away. Someone walks passed and tries to install something from you terminal?