Blocking Sudo Exploits with Fapolicyd (opens in new tab)

(jwgarber.ca)

2 pointsjwgarber0y ago2 comments

2 comments

2 comments · 1 top-level

Modified30190y ago· 1 in thread

Does ‘doas’ avoid these kinds of exploits, or is it just as vulnerable?

It's also an SUID binary so in theory the same thing could happen. However it's much simpler than sudo so the odds of a bug creeping in like this are much smaller.

j / k navigate · click thread line to collapse