Hello, Picking up an old inquiry from wiz@ from... 2013: https://mail-index.netbsd.org/tech-userlevel/2013/12/04/msg008256.html
It looks like NetBSD still ships a password file with toor and root having the same shell, which seems to defeat the point of the toor account. (FreeBSD currently ships root with /bin/csh and toor with an implicit /bin/sh; OpenBSD has root with /bin/ksh and no toor at all.) I think /rescue/sh would make the most sense for toor... -Jan