2
0
mirror of https://github.com/chubin/cheat.sheets synced 2024-11-11 01:10:31 +00:00
cheat.sheets/sheets/doas
2020-04-20 19:51:11 +02:00

36 lines
1.3 KiB
Plaintext

# doas
# Execute commands as another user
#
# OpenBSD lightweight sudo alternative, "dedicated openbsd application subexecutor"
# It was created by Ted Unangst after he was dissatisfied with the complexity
# of sudo and had issues with the default sudo configuration
# Remove the folder of "/home/user" as user
# If the -u option is not specified, the command will be executed as root
doas -u user ls /home/user
# Show the contents of "/etc/shadow" as root
doas cat /etc/shadow
# Execute the shell defined in $SHELL as root
doas -s
# Permission to execute commands as another user are given in the config file "/etc/doas.conf"
# The following line grants permission for every user in the wheel group to execute commands as root
#
# permit persist keepenv :wheel
#
# Where the option "persist" makes doas only ask for the password once in each shell session
# Where the colon specifies that "wheel" is a group, not a user
# And where the option "keepenv" keeps the current environment variables
#
# The following line rejects permission for "user" to run commands as anon,
# if the user is not specified, it will default to root
#
# deny user as anon
#
# The following line allows "user" to execute only the program "shutdown" as root,
# without asking for a password
#
# permit nopass user cmd shutdown