-
Su = Switch User / Substitute User; it allows you to run a full shell as another user. It can be any user, but if you don't specify then it'll open a shell as the root user with its elevated privileges. It allows you to do everything the root user can while that shell is still open, until you exit.
-
Sudo = SuperUser Do; it allows you to run one command with elevated privileges as the root user. Once it's done the command it usually then ends. You can actually also launch a full interactive shell with sudo -i but it's not really used much as it's easier to just type su and use that tool instead.
-
Doas = Dedicated Openbsd Application Subexecutor (seriously). It's an alternative to Sudo that originated in Openbsd that also allows users to run a command with elevated privileges as the root user. Doas can also be used to open a full shell like Su (e.g. doas -su Username). Its code is smaller and tighter, and is seen as more secure than Sudo. It also has much more straight forward configuration. It's newer than Sudo, so although Doas is in theory better, Sudo is the default widely used tool across the vast majority of Linux.
post
replies:
load more comments
(1 reply)
Sudo runs a temp shell as root. Doas runs the temp shell with whatever user you specified defaults to root w no arguments. Personally I just su to the user then run the command as the user natively in the users shell, makes it way easier to see what you did in the history and logs
replies:
sudo and doas do basically the same thing. The OpenBSD people wrote doas because sudo is super overcomplicated and they wanted something smaller and simpler (they do that a lot!). In typical OpenBSD fashion it's way less of a pain to configure. But like, sudo is also fine.
-- Frost
replies:
Well answered in your duplicate post https://nord.pub/c/linuxquestions/p/267003/what-s-the-fundamental-difference-between-sudo-and-doas
replies:
top 23 comments