From dbebd71db1ed071d2c0274a6fa3bdcbf84808c46 Mon Sep 17 00:00:00 2001
From: "Kelvin M. Klann" <kmk3.code@protonmail.com>
Date: Wed, 5 Oct 2022 07:35:52 -0300
Subject: disable-common.inc: blacklist doas binary

OpenDoas is an alternative to sudo.  It is an unofficial port of
OpenBSD's doas.  Details:

    $ LC_ALL=C pacman -Si galaxy/opendoas |
      grep -e '^Version' -e '^Description' -e '^URL'
    Version         : 6.8.2-1
    Description     : Run commands as super user or another user
    URL             : https://github.com/Duncaen/OpenDoas

Environment: Artix Linux.

Also, add /etc/doas.conf to etc/ids.config.
---
 etc/ids.config             | 1 +
 etc/inc/disable-common.inc | 1 +
 2 files changed, 2 insertions(+)

(limited to 'etc')

diff --git a/etc/ids.config b/etc/ids.config
index 1217d4a3a..880ec6ab5 100644
--- a/etc/ids.config
+++ b/etc/ids.config
@@ -128,6 +128,7 @@ ${HOME}/.local/share/autostart
 /etc/apparmor*
 /etc/chkrootkit.conf
 /etc/cracklib
+/etc/doas.conf
 /etc/libaudit.conf
 /etc/group*
 /etc/gshadow*
diff --git a/etc/inc/disable-common.inc b/etc/inc/disable-common.inc
index 5918ee640..23886f1b6 100644
--- a/etc/inc/disable-common.inc
+++ b/etc/inc/disable-common.inc
@@ -479,6 +479,7 @@ blacklist ${PATH}/chage
 blacklist ${PATH}/chfn
 blacklist ${PATH}/chsh
 blacklist ${PATH}/crontab
+blacklist ${PATH}/doas
 blacklist ${PATH}/evtest
 blacklist ${PATH}/expiry
 blacklist ${PATH}/fusermount
-- 
cgit v1.2.3-70-g09d2