• ryannathans@aussie.zone
    link
    fedilink
    English
    arrow-up
    1
    ·
    3 hours ago

    For an LLM comparison, this is what I get from haiku

    sudo is older, more complex, and feature-rich, while doas is newer, simpler, and security-focused.

    Core distinctions:

    Code size & complexity: doas has roughly 700 lines of code versus sudo’s 100,000+ lines, making doas easier to audit and maintain.

    Configuration: sudo uses the complex sudoers file with intricate syntax; doas uses a simpler doas.conf file that’s more straightforward to read and write.

    Security philosophy: doas was designed with security-first principles, minimizing potential attack surface. sudo accumulated features over decades, increasing complexity and potential vulnerabilities.

    Feature set: sudo has advanced features like session recording, plugins, authentication caching, and detailed logging. doas is minimalist—it handles the essential privilege escalation task without extras.

    Adoption: sudo is ubiquitous across Linux and Unix systems. doas is less common but gaining traction, particularly on OpenBSD (where it originated) and among security-conscious users.

    Performance: doas is faster and lighter, while sudo carries more overhead.

    In practice, doas works well for straightforward privilege escalation needs, while sudo is better if you need advanced features or broader compatibility.