Doas: Difference between revisions
imported>RePtarmagain m Added correct list encapsulation to the nix code example, old example throws error: A definition for option `security.doas.extraRules' is not of type `list of (submodule) |
Add language bar |
||
| (8 intermediate revisions by 6 users not shown) | |||
| Line 1: | Line 1: | ||
<languages/> | |||
<translate> | |||
<!--T:1--> | |||
[https://en.wikipedia.org/wiki/Doas doas] is a utility to execute commands as a different user, typically the super user. It is often installed as a replacement for sudo, due to its ease of configuration and greater simplicity. | [https://en.wikipedia.org/wiki/Doas doas] is a utility to execute commands as a different user, typically the super user. It is often installed as a replacement for sudo, due to its ease of configuration and greater simplicity. | ||
</translate> | |||
== Configuration == | <translate> | ||
<!--T:2--> | |||
It is not recommended to use doas due to compatibility issues with sudo. | |||
</translate> | |||
<translate> | |||
<!--T:3--> | |||
Flake based configurations require git to be installed as a system package in order to rebuild. | |||
</translate> | |||
<translate> | |||
== Configuration == <!--T:4--> | |||
</translate> | |||
<translate> | |||
<!--T:5--> | |||
The following configuration will give the user <code>foo</code> the ability to execute commands as the super user via <code>doas</code>, while disabling the <code>sudo</code> command. | The following configuration will give the user <code>foo</code> the ability to execute commands as the super user via <code>doas</code>, while disabling the <code>sudo</code> command. | ||
</translate> | |||
<translate> | |||
<!--T:6--> | |||
<syntaxhighlight lang="nix"> | <syntaxhighlight lang="nix"> | ||
security.doas.enable = true; | security.doas.enable = true; | ||
| Line 10: | Line 26: | ||
security.doas.extraRules = [{ | security.doas.extraRules = [{ | ||
users = ["foo"]; | users = ["foo"]; | ||
# Optional, retains environment variables while running commands | |||
persist = true; # Optional, | # e.g. retains your NIX_PATH when applying your config | ||
keepEnv = true; | |||
persist = true; # Optional, don't ask for the password for some time, after a successfully authentication | |||
}]; | }]; | ||
</syntaxhighlight> | </syntaxhighlight> | ||
</translate> | |||
[[Category:Applications]] | |||
[[Category:Security]] | |||