On 2026/10/16 18:34, David Uhden Collado wrote:
> Stuart Henderson wrote:
> > On 2026/10/16 08:23, Stuart Henderson wrote:
> > > > > +++ editors/micro/patches/patch-internal_config_settings_go   16 Oct 
> > > > > 2026 02:10:07 -0000
> > > > > @@ -0,0 +1,15 @@
> > > > > +Use base-system doas as the default privilege command on OpenBSD.
> > > > > +Keep upstream sucmd configuration and its save/truncate call sites 
> > > > > intact.
> > 
> > <reads it again and finds it's simpler than suggested by the email>
> > 
> > oh, I don't think there's really anything to do here actually, if the
> > user wants doas they can already set it, doesn't seem worth patching
> > code in this case. it's not hardcoded.
> 
> Yes, but that is not the kind of behavior people expect on OpenBSD,
> especially when sudo is not declared as a runtime dependency.
> 
> There are three possible approaches here:
> 
> 1. Add security/sudo as a runtime dependency.
> 2. Patch editors/micro to use `doas` as the default `sucmd`.
> 3. Remove sucmd support from micro entirely through patches. This would
> require more extensive patches than the ones I originally proposed, but it
> would be better from a security standpoint.

wtf?

4.  leave it as-is

> I can send a diff with the changes required for the third option if you're
> interested.

nope

Reply via email to