Skip to content
This repository was archived by the owner on Sep 16, 2025. It is now read-only.

Linux group permissions, bug fix and optimizations

Choose a tag to compare

@slicer69 slicer69 released this 03 Sep 16:58
· 157 commits to master since this release

This release brings about a few improvements to the doas code. Most of the adjustment affect Linux users, but there are improvements across the board.

  1. Group permissions of the original user are now dropped on Linux. This prevents the original user's group access from interfering with the target user's owned files. Group permissions were already dropped on FreeBSD (and I believe) NetBSD, and this brings doas's Linux behaviour into line with the other systems.

  2. Added -Wall to compiler to make sure we catch all compiler warnings, tested with both Clang and GCC.

  3. Fixed a couple of compiler warnings that get rid of either unneeded variables or introduce sanity checks on return functions. This should make doas more secure, across platforms/compilers.

  4. Added build-time optimizations. doas is now built with -O2 passed to the compiler. This can be overruled by modifying the OPT variable when it is passed to make/gmake. eg. make OPT="".