which one are you? #linux #unix
@nixCraft i'm a sudo user, but what's wrong with doas?
@binbows @nixCraft The list is in reverse. You should be asking what's better with doas. It is a sudo alternative from openBSD that has been ported to Linux. The main advantages are a lower attack surface due to having less code and a simpler config.
@binbows @nixCraft There is nothing wrong with doas, some say it is better due to a smaller codebase (sudo does WAY more than just execute something as root), which should probably make it less prone to bugs (that are quite critical in this field)
@nixCraft
Ah, the days when security was simple 🔐
@nixCraft using Linux just to run a WIndows VM as Administrator.
@nixCraft the last one, unless it's enforced by the customer's policy

@nixCraft None.

I use 'su -' to summon root.

@frank this is one is for you 😂

@nixCraft Aww.

Add a '-' (start as login shell with cleared and initialised env vars) and I'd pick 3.

@nixCraft pfexec (Solaris) usually in auth_profiles mode which means it prompts for authentication a bit like sudo
@nixCraft I’ll stick to ‘sudo’ for now.
@nixCraft TIL there is a command called "doas." Seems like a good backup plan to log in to another account before f*cking up something so that I can hold its owner accountable.
@nixCraft what about init=/bin/bash ?
@nixCraft
I run every privileged command as pid 1 with init=/bin/prog kernel parameter.
@theslik @nixCraft yeah, that made earlier builds of OS/1337 crash!
@nixCraft I always boot into single user mode.
@nixCraft write your own kernel with no users, where everyone has full 777 perms on everything
@nixCraft you can’t get hacked if you have no user account to access 
@nixCraft
depends on the system
if it’s a server where the default user account is root then the last one (shut up)
if it’s a system where it makes me make a user then always sudo
@nixCraft i am 3
Edit: just realised that needs context 🧐
We are going backward in security practices