From cf5f037f498924d9c776ad38d78f0512e30a3579 Mon Sep 17 00:00:00 2001 From: AluminumTank Date: Sun, 31 Jan 2021 14:28:04 -0500 Subject: [PATCH] update readme with suggested configuration --- README.md | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/README.md b/README.md index df5d864..3b1c61d 100644 --- a/README.md +++ b/README.md @@ -1,3 +1,17 @@ # doasedit a Bash script replacement for sudoedit using doas. [Inspired by this Reddit comment.](https://www.reddit.com/r/linux/comments/l6y7nv/is_doas_a_good_alternative_to_sudo/gl4hs42?utm_source=share&utm_medium=web2x&context=3) + +## doas.conf + +You'll want to configure `doas` such that it doesn't ask for password at every +line of the script using `doas`. You can accomplish this with either `nopass` +or `persist`, e.g.: +``` +# allow users in group 'admin' to use doas without asking for password +# (more dangerous) +permit nopass :admin +# allow users in group 'admin' to use doas with password, but not asking for +# some time after first successful authentication +permit persist :admin +```