Sudo Alternatives

Of course, Sudo isn’t the only game in town. I won’t comment on these other options as I haven’t spent much time working with them (and I’d probably be a bit biased). If you would like to add to this list, please send mail to sudo@sudo.ws.

• The OpenBSD doas command is similar to sudo and has been ported to other systems.

• vsys

• GNU userv

• super

• priv

• calife

• ssu

• su1

• op (originally shipped with ConvexOS, this is a free version based on Tom Christiansen’s paper)

• The Solaris pfexec command can be used to run commands with extra privileges, as determined by the security profile.

• AIX has support for role-based access control (RBAC) that can be used to assign fine-grained privileges to a user.

• HP-UX has a restricted version of the sam system administration tool that allows non-root users to perform specific tasks.

• Privilege Manager for Unix

• Safeguard for Sudo which supports a centrally administered sudoers file, I/O logging, and a management console.

• Privilege Management for Unix and Linux (formerly Power Broker)

• CaclMgr

• Core Privileged Access Manager (BoKS)

• CyberArk On-Demand Privileges Manager

• Delinea DirectAuthorize includes a dzdo command that functions similarly to sudo. They also include a sudo migration tool.

• Sudo for Windows

• Privilege Manager for Windows

• gsudo

• sudowin

• suDown