I see people talking about doas saying it’s just like sudo but with less features. I’m just wondering if there is any situation where you should use doas or if it’s just personal preference.
I see people talking about doas saying it’s just like sudo but with less features. I’m just wondering if there is any situation where you should use doas or if it’s just personal preference.
How is it more secure?
Afaik much smaller code base and as such easier to audit.
I think it’s because sudo only requires a password the first time on each shell.
sudo maintains ‘sudo state’ for 15 minutes. After that you need to enter the password again.
15 minutes that’s good to know thanks.
It is a configurable value so don’t rely on it being 15 minutes everywhere.
TIL, thanks for this info
It’s entirely configurable but I think by default sudo will “cache” your authentication for a period of time so multiple commands in the same session only need the password entered once. You can even configure sudo to not need a password for certain commands (although obviously you need to be careful you’re not opening a hole in your security).
doas is likewise configurable; though the mechanism that keeps track of the timeout is different on OpenBSD (where doas originated) & Linux ---- and there used to be some reservations about the latter implementation.