Ingo Schwarze writes:
> I see nothing wrong with it.  It is easier to describe in the manual

Indeed I was not suggesting that there was something wrong; being asked for a 
password when doing something which root could implicitly do simply confused me 
for a moment which prompted figuring out what the situation was.

> The bikeshed has already been painted, and no matter whether you are
> justified in calling the colour that tedu@ chose "pink", i wouldn't
> see an obvious benefit in re-painting it now.

I have no desire to change this behaviour or engage in bike-shedding. Please 
no. Perhaps instead 5 free lines?

--- doas.1.~1.19.~      Sun Sep  4 18:20:37 2016
+++ doas.1      Thu Jul  4 01:26:21 2019
@@ -85,6 +85,12 @@
 Execute the command as
 .Ar user .
 The default is root.
+.Sh NOTE
+Although the kernel imposes no restrictions on the root user's ability
+to pose as any other user,
+.Nm
+will always require a password as per its configuration in order to
+keep unnecessary complications out of a critical security utility.
 .El
 .Sh EXIT STATUS
 .Ex -std doas

Not necessary of course but would have been nice for my peace of mind the other 
day when it happened (ie. to know that the situation has been duly considered). 
btw. I've never done anything with mdoc before so I expect there's a better 
macro to use to head this than .Sh but that's really not the point.

> Please do not cross-post between different OpenBSD lists.

Apologies and understood.

Matthew

Reply via email to