A portable version of the OpenBSD `doas` command
git clone
Log | Files | Refs | README | LICENSE

commit fec01c17ec1cde1df449f76e5bda10e7afae2e05
parent 3d4a67e24708199e456761db47f9962f3772f555
Author: Jean-Marie Cannie <>
Date:   Wed, 22 Jul 2015 06:30:12 +0000

tweak previous; ok zhuk

doas.conf.5 | 15++++++---------
1 file changed, 6 insertions(+), 9 deletions(-)

diff --git a/doas.conf.5 b/doas.conf.5 @@ -1,4 +1,4 @@ -.\" $OpenBSD: doas.conf.5,v 1.7 2015/07/20 20:18:45 tedu Exp $ +.\" $OpenBSD: doas.conf.5,v 1.8 2015/07/21 11:04:06 zhuk Exp $ .\" .\"Copyright (c) 2015 Ted Unangst <> .\" @@ -13,7 +13,7 @@ .\"WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN .\"ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF .\"OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. -.Dd $Mdocdate: July 20 2015 $ +.Dd $Mdocdate: July 21 2015 $ .Dt DOAS.CONF 5 .Os .Sh NAME @@ -33,9 +33,7 @@ The rules have the following format: .Op Ar options .Ar identity .Op Ic as Ar target -.Oo -.Ic cmd Ar command Op Ic args ... -.Oc +.Op Ic cmd Ar command Op Ic args ... .Ed .Pp Rules consist of the following parts: @@ -73,11 +71,10 @@ The default is root. The command the user is allowed or denied to run. The default is all commands. Be advised that it's best to specify absolute paths. -.It Ic args Op ... +.It Ic args ... Arguments to command. -If specified, the command arguments set provided by user and -the command arguments set in rule should be the same for successful -rule match. +If specified, the command arguments provided by the user +need to match for the command to be successful. Specifying .Ic args alone means that command should be run without any arguments.