Ubuntu Is Replacing SUDO. Should You?

Ubuntu Is Replacing SUDO. Should You?

Title: P2: Doas instead of sudo [2025-05-04 Sun]
โฒ #dailyreport #linux #administration #permissions #secops #sudo #doas #network #bash #proc
Title: P1: Doas instead of sudo [2025-05-04 Sun]
permit setenv { WAYLAND_DISPLAY XDG_RUNTIME_DIR } nopass g
as ff
doas -u ff firefox
-----------------------------------------------------
With help of AI I have written a simple bash scrippt that
output average network bandwidth by reading directly
from /proc/net/dev
I think 70 lines is better than some special app with
writing output parser for it. #dailyreport #linux #administration #permissions #secops #sudo #doas #network #bash #proc
Title: P0: Doas instead of sudo [2025-05-04 Sun]
#sudo #doas #network #bash #proc
Sudo command is overburden, I switched to Doas tool from
FreeBSD project that lighter by weight. I don't use SU
command, because it require PAM framework, that I don't
use.
Before:
larry ALL=(ff) NOPASSWD: ALL
sudo --preserve-env=WAYLAND_DISPLAY,XDG_RUNTIME_DIR -u ff
firefox
After: #sudo #doas #network #bash #proc #dailyreport #linux #administration #permissions #secops #sudo #doas #network #bash #proc
Yes. The #OpenBSD version does not work as-is anywhere else. Basically: either one modifies the code to conditionally-compile out the OpenBSDisms and loses functionality, or one takes the OpenBSDisms out completely and replaces them with sudoisms.
https://news.ycombinator.com/item?id=37317970
https://news.ycombinator.com/item?id=36353756
#FreeBSD, #NetBSD, and #Arch Linux have both Smith's and Overbruck's versions; #Debian Linux only the latter; #SmartOS only the former.
One would have to touch the #FreeBSD kernel to get the full #OpenBSD functionality.
OpenBSD provides doas with a way to persist, by storing data in the session structure associated with the controlling terminal. FreeBSD would need to have that added.
The OpenDOAS fork (in FreeBSD ports) uses the more problematic flag files, per sudo, that OpenBSD was trying to get away from. So one must avoid starting from that instead of the original, moreover.
New ๐จ๐ฝ๐น๐ถ๐ณ๐ ๐ฃ๐ฟ๐ถ๐๐ถ๐น๐ฒ๐ด๐ฒ๐ ๐ผ๐ป ๐๐ฟ๐ฒ๐ฒ๐๐ฆ๐ [Uplift Privileges on FreeBSD] article on vermaden.wordpress.com blog
https://vermaden.wordpress.com/2026/03/01/uplift-privileges-on-freebsd/
#verblog #freebsd #linux #illumos #solaris #sudo #doas #su #mdo