doas has no pseudo-terminal allocation option like sudo?

sudo by default allocates a pseudo-terminal (I believe since 2023? is this correct?) to mitigate terminal injection attacks (use_pty in visudo). doas' philosophy is partially to avoid sudo's bloat, but this seems kinda concerning that doas doesn't provide the aforementioned feature.
 
i didn't even know this was a thing in the first place, i thought sudo just executed the command as a different user and all the bloat was elsewhere
either way, how likely is it for an attack like this to even happen
 
Back
Top