Ingo Schwarze writes: > I see nothing wrong with it. It is easier to describe in the manual
Indeed I was not suggesting that there was something wrong; being asked for a password when doing something which root could implicitly do simply confused me for a moment which prompted figuring out what the situation was. > The bikeshed has already been painted, and no matter whether you are > justified in calling the colour that tedu@ chose "pink", i wouldn't > see an obvious benefit in re-painting it now. I have no desire to change this behaviour or engage in bike-shedding. Please no. Perhaps instead 5 free lines? --- doas.1.~1.19.~ Sun Sep 4 18:20:37 2016 +++ doas.1 Thu Jul 4 01:26:21 2019 @@ -85,6 +85,12 @@ Execute the command as .Ar user . The default is root. +.Sh NOTE +Although the kernel imposes no restrictions on the root user's ability +to pose as any other user, +.Nm +will always require a password as per its configuration in order to +keep unnecessary complications out of a critical security utility. .El .Sh EXIT STATUS .Ex -std doas Not necessary of course but would have been nice for my peace of mind the other day when it happened (ie. to know that the situation has been duly considered). btw. I've never done anything with mdoc before so I expect there's a better macro to use to head this than .Sh but that's really not the point. > Please do not cross-post between different OpenBSD lists. Apologies and understood. Matthew