Skip to content

Latest commit

 

History

History
23 lines (18 loc) · 683 Bytes

README.md

File metadata and controls

23 lines (18 loc) · 683 Bytes
Raw

Replace Sudo with OpenDoas

  • The package is called opendoas and is present at almost any major Linux distro!
  • Steps are 0 ) adding the user to the wheel grp (should be default most cases), 1) adding that grp and allowing longer persistence before timeouts & 2-3) disabling the sudo binary
# 0 add to wheel grp
sudo usermod -aG wheel myuser

# 1 change /etc/doas.conf to only allow wheel users
permit persist :wheel

# 2 disable rather than remove the sudo binary
sudo chmod 0 /usr/bin/sudo

# 3 make it sticky to prevent changes
doas chattr +i /usr/bin/sudo

In case you wanna reenable sudo some day

doas chmod 4711 /usr/bin/sudo
doas chattr -i /usr/bin/sudo