Replace sudo with doas

[Patrick]

@arraybolt3

bootclockrandomization

How so? It has no sudoers exception.

@arraybolt3

• setup-dist (in particular the easyorca feature, but it looks bitrotten?)

This one we can say “boot into admin mode”.

@arraybolt3

• tb-starter (this one in particular will break badly)
• tb-updater (this also may break pretty badly)

Needs re-design.

@arraybolt3

We will still need some way to run certain commands as root, even in user mode (this will be important for doing things like enabling Tor Browser to be launched even when /home is mounted noexec).

We’ll just break the functionality as long as doas isn’t installed. As long as Tor Browser is unavailable as a Debian package [1] and thereby properly installed into the system and keeping out executable of the /home folder, Whonix probably should not enable noexec [1] for /home by default.

@arraybolt3

• How will Qubes OS VMs handle this? Will they just run as admin automatically and not use user mode at all?

Qubes has a separate ticket. → Qubes sudo / su / root Hardening - Development Discussion

Qubes default is to install qubes-core-agent-passwordless-root. The plan for Kicksecure, Whonix is to no longer install qubes-core-agent-passwordless-root by default. Users will then be advised to open a Qubes Root Console instead.

---

[1] Would stable Tor Browser deb package help or burden whonix devs?
[2] Enhanced Security via Mount Options and Compiler Restrictions