SlackBuilds Repository

15.0 > System > doas (6.4)

This is the portable doas port maintained by Jesse Smith.

doas is a small alternative to sudo that allows a user to run commands
as another user, typically root. This SlackBuild installs the doas
binary with SUID root.

After installation, create /etc/doas.conf. For example:

  permit :wheel as root

See doas.conf(5) for the complete configuration syntax. An example
configuration is installed in:

  /usr/doc/doas-6.4/doas.conf.sample

The /etc/doas.conf file controls authorization and whether a password is
required. For passwordless access by the wheel group, use:

  permit nopass :wheel as root

Without the "nopass" option, doas authenticates through PAM. The PAM
file controls password validation; doas.conf rules do not belong in
/etc/pam.d/doas. On Slackware, the sudo package may not provide a
/etc/pam.d/sudo file. Inspect the PAM policy already used by the system,
such as /etc/pam.d/other or /etc/pam.d/system-auth, and create
/etc/pam.d/doas with the appropriate distribution-specific rules.

For a Slackware system that provides /etc/pam.d/system-auth, a typical
/etc/pam.d/doas file is:

  #%PAM-1.0
  auth    include    system-auth
  account include    system-auth
  session include    system-auth

Only use this example if /etc/pam.d/system-auth exists and matches the
PAM policy used by the system.

This PAM file is not needed when all matching doas rules use "nopass".

doas adds no users or groups and can be installed alongside sudo.

WARNING
-------
This package conflicts with the OpenDoas package available at:

  https://slackbuilds.org/repository/15.0/system/opendoas/

Both packages install /usr/bin/doas. Only one of them should be
installed at a time.

Maintained by: r1w1s1
Keywords: doas,security,persistence,pam,shadow
ChangeLog: doas