Package Details: doas 6.4-4

Git Clone URL: https://aur.archlinux.org/doas.git (read-only, click to copy)
Package Base: doas
Description: A port of OpenBSD's doas which runs on FreeBSD, Linux, NetBSD, illumos, macOS and MidnightBSD
Upstream URL: https://codeberg.org/thejessesmith/doas/
Licenses: BSD
Conflicts: opendoas, opendoas-git
Submitter: KingofToasters
Maintainer: UnbreakableMJ
Last Packager: UnbreakableMJ
Votes: 10
Popularity: 0.020588
First Submitted: 2019-10-27 07:27 (UTC)
Last Updated: 2026-05-03 12:56 (UTC)

Dependencies (2)

Sources (3)

Latest Comments

1 2 Next › Last »

colinstu commented on 2026-06-24 23:48 (UTC)

How does this compare to opendoas?

What's the difference between these two projects?

UnbreakableMJ commented on 2026-05-26 20:48 (UTC)

Thanks @VIPLightning for your patched fork. I'm keeping this package as released by thejesseesmith, and everyone is free to use the patched version or extra/opendoas.

a821 commented on 2026-05-26 18:01 (UTC)

@VIPLightning: OK. I won't change my mind that the original report looks like AI slop (and Portuguese does not help); and the fact that your comment (I didn't know it was you BTW) was deleted raised too many bells.

However, I took the trouble to verify the exploit and must say that indeed works (although many conditions are required to make it work) It would have been nice if the issue included a short summary on how to run it (no one will go through the document unless you speak Portuguese). Here is how (tested with 6.4 in a nspawn container)

  1. install doas and enable a user victim to run commands (enough with permit victim in doas.conf)
  2. compile and run exploit_toctou_write.c as user attacker (that has no doas rights)
  3. as user victim run: EDITOR=nano doasedit /tmp/toctou_race/config.txt and save it (why would one run that command is anyone guess)
  4. now the user attacker has doas rights.

a821 commented on 2026-05-26 15:21 (UTC)

It's funny that the issue was closed as AI slop (which was my first impression) and the repository you suggest to use has a comment in the same issue that was deleted by codeberg's moderation team.

Frestein commented on 2026-01-29 01:18 (UTC)

Maybe you should remove opendoas from provides? That should fix this:

:: Starting full system upgrade...
:: Replace doas with cachyos-extra-v3/opendoas? [Y/n] n
:: Replace doas with extra/opendoas? [Y/n] n

maxrdz commented on 2023-06-15 07:06 (UTC)

Please install opendoas from the main repositories instead!

1 2 Next › Last »