Doas: Difference between revisions
No edit summary |
Marked this version for translation |
||
| (4 intermediate revisions by 4 users not shown) | |||
| Line 1: | Line 1: | ||
<translate> | |||
<!--T:1--> | |||
[https://en.wikipedia.org/wiki/Doas doas] is a utility to execute commands as a different user, typically the super user. It is often installed as a replacement for sudo, due to its ease of configuration and greater simplicity. | [https://en.wikipedia.org/wiki/Doas doas] is a utility to execute commands as a different user, typically the super user. It is often installed as a replacement for sudo, due to its ease of configuration and greater simplicity. | ||
</translate> | |||
<translate> | |||
<!--T:2--> | |||
It is not recommended to use doas due to compatibility issues with sudo. | It is not recommended to use doas due to compatibility issues with sudo. | ||
</translate> | |||
<translate> | |||
<!--T:3--> | |||
Flake based configurations require git to be installed as a system package in order to rebuild. | Flake based configurations require git to be installed as a system package in order to rebuild. | ||
</translate> | |||
== Configuration == | <translate> | ||
== Configuration == <!--T:4--> | |||
</translate> | |||
<translate> | |||
<!--T:5--> | |||
The following configuration will give the user <code>foo</code> the ability to execute commands as the super user via <code>doas</code>, while disabling the <code>sudo</code> command. | The following configuration will give the user <code>foo</code> the ability to execute commands as the super user via <code>doas</code>, while disabling the <code>sudo</code> command. | ||
</translate> | |||
<translate> | |||
<!--T:6--> | |||
<syntaxhighlight lang="nix"> | <syntaxhighlight lang="nix"> | ||
security.doas.enable = true; | security.doas.enable = true; | ||
| Line 19: | Line 28: | ||
# e.g. retains your NIX_PATH when applying your config | # e.g. retains your NIX_PATH when applying your config | ||
keepEnv = true; | keepEnv = true; | ||
persist = true; # Optional, | persist = true; # Optional, don't ask for the password for some time, after a successfully authentication | ||
}]; | }]; | ||
</syntaxhighlight> | </syntaxhighlight> | ||
</translate> | |||
[[Category:Applications]] | |||
[[Category:Security]] | |||