From: David Crumpton <david.m.crumpton@gmail.com>
Subject: Re: doas -l feature
To: Theo de Raadt <deraadt@openbsd.org>
Cc: tech@openbsd.org
Date: Fri, 6 Jun 2025 09:56:33 -0600

Perfect!

Sent from my iPhone

> On Jun 6, 2025, at 09:55, Theo de Raadt <deraadt@openbsd.org> wrote:
> 
> doas can be used with a doas.conf that is mode 600 or 400.
> 
> A user can do what they are permitted to do, but they can't read
> doas.conf to see what is permitted.
> 
> Your proposal is a pretty big change.
> 
> So I don't think this is the right way to go.
> 
> 
> 
> 
>