clearlinux / distribution

Placeholder repository to allow filing of general bugs/issues/etc against the Clear Linux OS for Intel Architecture linux distribution
522 stars 29 forks source link

Add doas to repos #2517

Open godalming123 opened 2 years ago

godalming123 commented 2 years ago

Official package name: doas

License (must be an OSI approved Open Source license): BSD 2 clause license

Download URL of latest release: https://github.com/slicer69/doas/releases/tag/6.3p5

Latest release date (must be recent): 06 Jan 2021

Description: A permission manager originally used in bsd but since ported to linux with an aim of using less code and being less vulnerable then sudo with the drawback of no complex userrules.

insilications commented 2 years ago

Hmm, this seems interesting

anubhavkini commented 2 years ago

Most distributions package OpenDoas Debian Fedora Arch

fenrus75 commented 2 years ago

so I have a slight heartburn with this one. Since there is no way we could drop practically sudo in favor of this.... we're adding MORE setuid binaries and lines of code, rather than shrinking our totals.. yeah I get it that Doas is smaller than sudo.. but it's not zero lines.

I would prefer we ship fewer, not more setuid binaries (polkit etc) ... adding semi duplicate functionality then is a step away from that, not towards it.

On Sat, Jan 29, 2022 at 10:22 AM Anubhav Kini @.***> wrote:

Most distributions package OpenDoas https://github.com/Duncaen/OpenDoas Debian https://packages.debian.org/bullseye/doas Fedora https://packages.fedoraproject.org/pkgs/opendoas/opendoas Arch https://archlinux.org/packages/community/x86_64/opendoas

— Reply to this email directly, view it on GitHub https://github.com/clearlinux/distribution/issues/2517#issuecomment-1024962036, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAJ54FKC4LJVUMRZ3I3RADDUYQV4RANCNFSM5LFAYNRQ . Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

You are receiving this because you are subscribed to this thread.Message ID: @.***>

godalming123 commented 2 years ago

This package is not very important for my daily workflow and if you don't want to bother adding it that's fine but I just want it in the repos not necessarily installed by default - that's like saying you shouldn't have gnome web in the repos because Firefox is in the repos.

fenrus75 commented 2 years ago

once we add it we're on the hook for the security (updates) of it... even if it isn't in the default install... and things not in default/popular installs generally bitrot quicker making it worse not better if there's setuid stuff there

and yes that is why we try insane hard as well to keep to 1, well maintained and easy to update web browser.

On Sat, Jan 29, 2022 at 10:22 PM godalming123 @.***> wrote:

This package is not very important for my daily workflow and if you don't want to bother adding it that's fine but I just want it in the repos not necessarily installed by default - that's like saying you shouldn't have gnome web in the repos because Firefox is in the repos.

— Reply to this email directly, view it on GitHub https://github.com/clearlinux/distribution/issues/2517#issuecomment-1025080065, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAJ54FPAKDOBL7GRYNXZEC3UYTKJZANCNFSM5LFAYNRQ . Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

You are receiving this because you commented.Message ID: @.***>

godalming123 commented 2 years ago

Ok