Manuel Giraud wrote: > Hi, > > I've just shot myself in the foot after /etc/doas.conf tweaking. This > patch adds a failsafe "permit :wheel" rule in case of syntax error. Is > this safe enough? Should it be done elsewhere (with some kind of > visudo)?
I think the failsafe is "run su". Since it is possible to configure doas to even less than "permit :wheel" this would in some cases be a fail open.
