Get the latest tech news
SSH as a Sudo Replacement
A major caveat in tools like sudo and doas for that matter is that they rely on setuid binaries and privilege escalation in order to run commands as root. The design is not ideal, and also drags in a few limitations: - The whole user session needs to retain capabilities to perform privilege escalation.
A major caveat in tools like sudo and doas for that matter is that they rely on setuid binaries and privilege escalation in order to run commands as root. A little caveat here is that socat will read all input from ssh, and then write it into the socket, effectively duplicating the overhead of the connection. The above passfd.py script is a quick hack to move the experiment forward; for daily usage it would be best to write a tiny executable that does the same thing and put it into/usr/local/bin.
Or read this on Hacker News