> I think the failsafe is "run su". Visudo(8) style wrapper for doas(1) that would respect the editor preferences... is only a suggestion, no? We're 2015 here.
> Since it is possible to configure doas to > even less than "permit :wheel" this would in some cases be a fail open. I'm not sure how much exactly "flak" I'd get about this, but: is the "permit" word specifically chosen in the DSL for this? P.S. My opinion has zero value but why can't su(1) work this purpose? Not trying to be funny just reasoning about the basics. (I'm not anonymous).
