edneville / please Goto Github PK
View Code? Open in Web Editor NEWplease, a sudo clone
Home Page: https://gitlab.com/edneville/please
License: GNU General Public License v3.0
please, a sudo clone
Home Page: https://gitlab.com/edneville/please
License: GNU General Public License v3.0
sudo
has this timestamp_timeout
option that doesn't re-prompt you for a password within, say, 5 minutes of entering a password
It seems that please
doesn't have this option yet, but also I'd like to propose another modification that could make this option even better โ slightly less convenient, but more secure โ by using the concept of PINs, so instead of not re-prompting you for the full password during this timestamp_timeout
period, the please
command should instead prompt you every time, but not for your full password, but for a secondary, shorter password (aka "PIN")
This way you don't have to risk some wrong copy&paste or something worse doing anything as root within the blessed period
I understand that with proper more granular permissions this might not be as important, but at the same time not everyone will bother with granularity #1, so this is still useful and and improvement over the total passwordlessness!
Hi,
I get that the main USP here is the fine grained control.
Can we have a more broad example on how to replace sudo/doas?
I'm not a sysadmin, I just want to use the hottest new sudo replacement to run commands as root!
If the file is readable by our user, we should be able to run please --check /etc/please.ini
, without needing to have please
setuid at that point.
This is especially useful in NixOS, in order to allow us to validate the please.ini
file at build time, instead of the user finding out they broke something on accident at run time.
I manually bootstrapped your commit to void-packages and it compiled and installed successfuly.
INFO:
User: dave
Hostname: void
/etc/please.ini
:
[dave_root_require_pass]
name = dave
target = root
hostname = void
regex = .*
[dave_edit]
name = dave
require_pass = true
type = edit
editmode = keep
regex = ^.*$
[dave_root_no_pass_reboot]
name = dave
require_pass = false
hostname = void
regex = /sbin/reboot
/etc/pam.d/please
:
#%PAM-1.0
auth include system-auth
account include system-auth
session include system-auth
/etc/pam.d/pleaseedit
:
#%PAM-1.0
auth include system-auth
account include system-auth
session include system-auth
Output:
$ ~ pleaseedit /etc/please.ini
Could not convert keep to numerical file mode
Exiting due to error, cannot fully process /etc/please.ini
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.