security/doas 6.3p12 DragonFly

Simple sudo alternative to run commands as another user

System: DragonFly
Repository: DPorts
Maintainer: [email protected] (as in FreeBSD)
License: BSD2CLAUSE, ISCL
Categories: security
Package size: 23.2 KiB, 46.7 KiB installed

Description

This is the FreeBSD port of the OpenBSD "doas" command. The doas program allows a regular user to run commands as another user (usually root). The doas command is a simplified (hopefully more secure) version of the "sudo" command and offers an easier to read/modify configuration.

In the other systems

System

Port

Version

DragonFly

security/doas

6.3p12

FreeBSD

security/doas

6.4

NetBSD

security/doas

6.3p2nb2

MidnightBSD

security/doas

6.3p12

Install

Binary package:

pkg install doas

From DPorts:

cd /usr/dports/security/doas && make install clean

Dependencies

No port depends on this one.

Configuration

No options to configure.

Service scripts: none

Message after installing

To use doas,

/usr/local/etc/doas.conf

must be created. Refer to doas.conf(5) for further details and/or follow
/usr/local/etc/doas.conf.sample as an example.

Note: In order to be able to run most desktop (GUI) applications, the user
needs to have the keepenv keyword specified. If keepenv is not specified then
key elements, like the user's $HOME variable, will be reset and cause the GUI
application to crash.

Users who only need to run command line applications can usually get away
without keepenv.

When in doubt, try to avoid using keepenv as it is less secure to have
environment variables passed to privileged users.

With the 6.1 release the transfer of most environment variables (e.g. USER,
HOME and PATH) from the original user to the target user has changed.

Please refer to doas.conf(5) for further details.