all 15 comments

sorted by: hot top controversial new old
[–] 11 points 1 year ago (8 children)
  • [–] 6 points 1 year ago (4 children)

    I keep seeing people promote doas, but is it really any more secure than sudo? besides just having less eyes on it?

  • source
  • parent
  • hideshow 4 child comments
  • [–] 8 points 1 year ago

    sudo has a bunch of commands and features nobody (except the person who implemented it) has ever used, giving it quite a large surface of attack. doas is meanwhile much leaner and developed by the OpenBSD community, meaning if a feature has security concerns it won't be implemented no matter how practical. sudo-rs somewhat of a middle ground between the two, not planning on implementing every single feature of sudo while keeping the same core commands and implementing the quality of life features doas doesn't like because they're insecure, and is the solution I personally use.

  • source
  • parent
  • [–] 5 points 1 year ago* (2 children)
  • [–] 10 points 1 year ago (3 children)

    As far as mitigation is concerned, the only thing you need to do is to confirm that your system's sudo version is at least version 1.9.17p1 or later, which can be done with the command sudo -V. If your version is older than 1.9.17p1, update immediately.

  • source
  • hideshow 3 child comments
  • [–] 6 points 1 year ago* (last edited 1 year ago) (2 children)

    This wouldn't apply to Debian derived distros (e.g. DietPi). I am assuming the fix will backported to the version of sudo shipping with bookworm.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 0 points 1 year ago (1 child)

    Why wouldn't this apply?

    One day in the future the later version of sudo would become available...?

  • source
  • parent
  • hideshow 1 child comment
  • [–] 5 points 1 year ago*

    I am assuming the fix for the second vulnerability will be backported to the older version in bookworn; 13p1 if I remember correctly.

    I've seen theme backport security to older releases of much less important software.

  • source
  • parent
  • [–] 10 points 1 year ago

    Already patched and available via updates.

  • source
  • [+] 0 points 1 year ago