Adam Jeanguenat wrote: > I'm not sure where I'm going wrong here, but I've been giving doas(1) > a whirl and ran into something that's left be a bit puzzled. > > I have some scripts in ~/bin, and my user account has PATH set > as desired. I can run things out of that dir as expected without > invoking doas, but attempting to prefix the command with doas in the > same manner I previously did with sudo doesn't seem to work.
doas allows PATH to be inherited, but resets it for itself to a limited set. this was so that e.g., "permit :wheel cmd ls" can't be tricked by creating a symlink ls -> /bin/sh. however, if there are no restrictions on the command, then the restriction probably doesn't need to be there. i can fix that.