Open godalming123 opened 2 years ago
Hmm, this seems interesting
so I have a slight heartburn with this one. Since there is no way we could drop practically sudo in favor of this.... we're adding MORE setuid binaries and lines of code, rather than shrinking our totals.. yeah I get it that Doas is smaller than sudo.. but it's not zero lines.
I would prefer we ship fewer, not more setuid binaries (polkit etc) ... adding semi duplicate functionality then is a step away from that, not towards it.
On Sat, Jan 29, 2022 at 10:22 AM Anubhav Kini @.***> wrote:
Most distributions package OpenDoas https://github.com/Duncaen/OpenDoas Debian https://packages.debian.org/bullseye/doas Fedora https://packages.fedoraproject.org/pkgs/opendoas/opendoas Arch https://archlinux.org/packages/community/x86_64/opendoas
— Reply to this email directly, view it on GitHub https://github.com/clearlinux/distribution/issues/2517#issuecomment-1024962036, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAJ54FKC4LJVUMRZ3I3RADDUYQV4RANCNFSM5LFAYNRQ . Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.
You are receiving this because you are subscribed to this thread.Message ID: @.***>
This package is not very important for my daily workflow and if you don't want to bother adding it that's fine but I just want it in the repos not necessarily installed by default - that's like saying you shouldn't have gnome web in the repos because Firefox is in the repos.
once we add it we're on the hook for the security (updates) of it... even if it isn't in the default install... and things not in default/popular installs generally bitrot quicker making it worse not better if there's setuid stuff there
and yes that is why we try insane hard as well to keep to 1, well maintained and easy to update web browser.
On Sat, Jan 29, 2022 at 10:22 PM godalming123 @.***> wrote:
This package is not very important for my daily workflow and if you don't want to bother adding it that's fine but I just want it in the repos not necessarily installed by default - that's like saying you shouldn't have gnome web in the repos because Firefox is in the repos.
— Reply to this email directly, view it on GitHub https://github.com/clearlinux/distribution/issues/2517#issuecomment-1025080065, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAJ54FPAKDOBL7GRYNXZEC3UYTKJZANCNFSM5LFAYNRQ . Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.
You are receiving this because you commented.Message ID: @.***>
Ok
Official package name: doas
License (must be an OSI approved Open Source license): BSD 2 clause license
Download URL of latest release: https://github.com/slicer69/doas/releases/tag/6.3p5
Latest release date (must be recent): 06 Jan 2021
Description: A permission manager originally used in bsd but since ported to linux with an aim of using less code and being less vulnerable then sudo with the drawback of no complex userrules.