Adam Jeanguenat wrote:
> I'm not sure where I'm going wrong here, but I've been giving doas(1)
> a whirl and ran into something that's left be a bit puzzled.
> 
> I have some scripts in ~/bin, and my user account has PATH set
> as desired. I can run things out of that dir as expected without
> invoking doas, but attempting to prefix the command with doas in the
> same manner I previously did with sudo doesn't seem to work.

doas allows PATH to be inherited, but resets it for itself to a limited set.
this was so that e.g., "permit :wheel cmd ls" can't be tricked by creating a
symlink ls -> /bin/sh. however, if there are no restrictions on the command,
then the restriction probably doesn't need to be there. i can fix that.

Reply via email to