Hacker News new | ask | show | jobs
by yesimahuman 959 days ago
Makes you wonder then why it does so much, if those rarely used features increase the surface area of possible exploits? This is just a question I’ve had about *nix utilities in general, since sudo is hardly the only tool with obscure flags and features
2 comments

Because the long tail of features is useful to someone. Mind, I like doas for this reason, but having the more feature rich option available makes sense.
This is part of what the openbsd ‘doas’ was trying to solve. They drastically reduced the functionality to reduce the attack surface.