61–70 of 91 posts
Earlier quoted context omitted.
That is not at all what sudoedit does.
Not at all? Might wanna brush up on the manpage. The temp file is a feature but not essential to getting work done.
The entire point of sudoedit is to reduce the attack surface, without that it's absolutely useless since you can just `sudo` whatever editor you prefer.
Earlier quoted context omitted.
> You can't use wheels musl wheel support was added some time ago: https://github.com/pypa/packaging/releases/tag/21.0 No idea how many packages actually build musl wheels though. From a quick glance at least cryptography and lxml has musl wheels.
Unfortunately, Alpine patched their version of Python in a way that is incompatible with musllinux wheels so we are back to where we started until Alpine Linux 3.16 in 2022[1]. EDIT: I spoke too soon. Apparently, they have decided to amend the patch in a way that is both backwards-compatible and compatible with musllinux wheels[2]. Hopefully, it will roll out soon. [1]: https://gitlab.alpinelinux.org/alpine/aports/-/…
Earlier quoted context omitted.
> Aside from forcing vim onto innocent users? Actually, `sudo -e` forces VIM onto innocent users. You are free to `sudo nano` if that's your preference. > `sudo -e` runs a few file copies / move as root. Interesting, thank you, I did not know that the editor is not run as root with -e. So presumably that means that it will have my environment, e.g. will run my .vimrc? Though that could be an attack vector too.
> Actually, `sudo -e` forces VIM onto innocent users No, it does not. It runs whatever EDITOR is set to (technically the first set of SUDO_EDITOR, VISUAL, and EDITOR). > So presumably that means that it will have my environment, e.g. will run my .vimrc? That is correct. > Though that could be an attack vector too. Only on the specific file, which would usually be a lot more noticeable unless the attack specifically m…
> Only on the specific file, which would usually be a lot more
> noticeable unless the attack specifically manages to recognise
> and target sudoedited files while closing the buffer.
Earlier quoted context omitted.
`sudo vim` will not load your user's vimrc, sudoedit will
Which is arguable an attack vector. Depending on how careless the user is, there is far more likely a chance that malicious code is found in .vimrc than is found in the VIM executable.
Earlier quoted context omitted.
> You can't use wheels musl wheel support was added some time ago: https://github.com/pypa/packaging/releases/tag/21.0 No idea how many packages actually build musl wheels though. From a quick glance at least cryptography and lxml has musl wheels.
Unfortunately, Alpine patched their version of Python in a way that is incompatible with musllinux wheels so we are back to where we started until Alpine Linux 3.16 in 2022[1]. EDIT: I spoke too soon. Apparently, they have decided to amend the patch in a way that is both backwards-compatible and compatible with musllinux wheels[2]. Hopefully, it will roll out soon. [1]: https://gitlab.alpinelinux.org/alpine/aports/-/…
Does anyone know where there are screenshots of this on the website? I like to see how a desktop looks before I try a new distro. Seems absent on the site
From what I understand of alpine, it's commonly used for Docker images to provide a lightweight distro for your apps vs using something like ubuntu or debian which may include more than what's required. I don't believe it's intended to be used in a desktop environment, but I could be wrong.
I'm familiar with Alpine in container scenarios, but is there any mileage to using it as a day-to-day desktop distro?
I'm familiar with Alpine in container scenarios, but is there any mileage to using it as a day-to-day desktop distro?
Earlier quoted context omitted.
Not at all? Might wanna brush up on the manpage. The temp file is a feature but not essential to getting work done.
> The temp file is a feature but not essential to getting work done. The entire point of sudoedit is to reduce the attack surface, without that it's absolutely useless since you can just `sudo` whatever editor you prefer.
Cool that they switched to `doas` from `sudo`. Another great OpenBSD tool gaining more adoption.
What's the 2 minute summary of why doas is better?
So, that’s why not sudo. As for why doas, see: