On Fri, Apr 01, 2016 at 02:47:42PM -0700, Philip Guenther wrote:
[snip]
> Sooo close. To quote doas.conf(5):
>
[snip]
> 'args' is *literal* there, so the correct config line would be
> permit nopass support as root cmd /usr/sbin/rcctl args restart ntpd
>
Hahaha, holy fballs! *donk* (I'll blame the hour. Yes, I think I will.))
Thanks!
Tor
PS: Here's a diff :-)
--- /usr/share/man/man5/doas.conf.5 Fri Feb 26 09:08:04 2016
+++ doas.conf.5 Sat Apr 2 00:14:34 2016
@@ -129,6 +129,7 @@
SUBPACKAGE WRKOBJDIR SUDO_PORT_V1 } :wsrc
permit nopass keepenv { ENV PS1 SSH_AUTH_SOCK } :wheel
permit nopass tedu as root cmd /usr/sbin/procmap
+permit nopass tedu as root cmd /usr/sbin/rcctl args restart ntpd
permit nopass keepenv root as root
.Ed
.Sh SEE ALSO