Blocking Sudo Exploits with Fapolicyd

jwgarber.ca

2 pointsjwgarber2 comments

Does ‘doas’ avoid these kinds of exploits, or is it just as vulnerable?

It's also an SUID binary so in theory the same thing could happen. However it's much simpler than sudo so the odds of a bug creeping in like this are much smaller.

Reply on news.ycombinator.com