#openbsd #doas #security #binary #single #port #vidoas

bin+lib doas-rs

A Rusty port of OpenBSD's doas, vidoas, and doasedit in a single binary

1 unstable release

0.1.0 Dec 15, 2023

#21 in #openbsd

Custom license

74 lines


A Rust port of OpenBSD's doas command.

Changes from the original

  1. Single Binary: doas-rs will be compiled statically, and internally include vidoas & doasedit in a single binary. Consequently, in order to use it normally, you will need to symlink or alias doas-rs doas to doas
  2. Zero Persistence: Persistence will not be a feature in doas-rs as a security measure. Instead, you are expected to type in your password everytime, in order to mitigate the risk of an evil maid attack during the time period your password is active. When support for doas.conf is added, the parser will simply ignore the persist keyword.


~232K SLoC