Re: doas -n

[Ted Unangst]

Marc Espie wrote:
> 
> I don't think it falls on the side of bloat, and it's a pretty nifty option
> to sudo...  


> @@ -361,7 +365,7 @@ main(int argc, char **argv, char **envp)
>       }
>  
>       if (!(rule->options & NOPASS)) {
> -             if (!auth_userokay(myname, NULL, NULL, NULL)) {
> +             if (nflag || !auth_userokay(myname, NULL, NULL, NULL)) {
>                       syslog(LOG_AUTHPRIV | LOG_NOTICE,
>                           "failed password for %s", myname);
>                       fail();
> 

alright, so technical nit. i don't think we want it syslogging in this case. i
would add a separate block just above.

        if (nflag)
                fail();

or perhaps even better:

        if (nflag)
                errx(1, "Authorization required");