Hello to all, I am sorry to say that I could not understand this behavior intuitively.
$ id -Gn hajime wheel $ cat /etc/doas.conf permit nopass hajime as root cmd mg # A permit keepenv :wheel # B $ doas mg /etc/doas.conf # no password, ok. ... $ But, $ id -Gn hajime wheel $ cat /etc/doas.conf permit keepenv :wheel # B permit nopass hajime as root cmd mg # A $ doas mg /etc/doas.conf # require password, ok? doas (***) password: ... $ I understand the former, but I could not understand the letter. My question is whether is this correct behavior? And, $ id -Gn hajime wheel $ cat /etc/doas.conf permit keepenv :games # New B: other than wheel group permit nopass hajime as root cmd mg # A $ doas mg /etc/doas.conf # no password, ok. ... $ Excuse me if you not understand or you feel bad with my poor English. Regards, Hajime Edakawa