Blocking Sudo Exploits with Fapolicyd
jwgarber.ca
1 thread
Does ‘doas’ avoid these kinds of exploits, or is it just as vulnerable?
It's also an SUID binary so in theory the same thing could happen. However it's much simpler than sudo so the odds of a bug creeping in like this are much smaller.