Talk:Doas

order of rules?

The manpage doesn't mention anything about the order of the rules. what happens with

```

permit nopass root as root

permit keepenv root

deny root as bob

```

will I keepenv if root does `doas root`? will it ask for password? will root be able to doas bob? what takes precedence over what? what cancels what?

Experimentation shows that it works from more restrictive to less restrictive. So keep your nopass'es at the bottom. Gcb (talk) 18:43, 26 March 2024 (UTC)

I've added Special:diff/804691. You find it documented in doas.conf(5). --Indigo (talk) 20:41, 26 March 2024 (UTC)

arguments not working?

I cannot get rules with arguments to work. Be warned. `doas: syntax error` might lock you out of your system. e.g. `permit bob as root cmd /bin/pacman -Suuy` Gcb (talk) 19:00, 26 March 2024 (UTC)