summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorzachir <zachir@librem.one>2023-03-12 23:41:06 -0500
committerzachir <zachir@librem.one>2023-03-12 23:41:06 -0500
commit22c139c729acb54c24695f5a291e57c4380550a7 (patch)
tree8c8867cba83e80ecf497fdb4c0cf29be42f46ede
parent6458c22a94f6eef9b944d3325db4e922061cf3af (diff)
update doas.conf
-rw-r--r--doas.conf24
1 files changed, 14 insertions, 10 deletions
diff --git a/doas.conf b/doas.conf
index ab9b891..c0328d2 100644
--- a/doas.conf
+++ b/doas.conf
@@ -1,12 +1,16 @@
-permit persist setenv { XAUTHORITY LANG LC_ALL } zachir
-permit nopass setenv { XAUTHORITY LANG LC_ALL } zachir cmd make args install
-permit nopass setenv { XAUTHORITY LANG LC_ALL } zachir cmd iptables
-permit nopass setenv { XAUTHORITY LANG LC_ALL } zachir cmd ip6tables
-permit nopass setenv { XAUTHORITY LANG LC_ALL } zachir cmd mount
-permit nopass setenv { XAUTHORITY LANG LC_ALL } zachir cmd mount.exfat
-permit nopass setenv { XAUTHORITY LANG LC_ALL } zachir cmd umount
-permit nopass setenv { XAUTHORITY LANG LC_ALL } zachir cmd modprobe
-permit nopass setenv { XAUTHORITY LANG LC_ALL } zachir cmd zzz
-permit nopass keepenv zachir as zachir
+permit persist setenv { XAUTHORITY LANG LC_ALL } :wheel
+permit nopass :wheel cmd make args install
+permit nopass :wheel cmd iptables args -S
+permit nopass :wheel cmd ip6tables args -S
+permit nopass :wheel cmd nft args list ruleset
+permit nopass :wheel cmd mount
+permit nopass :wheel cmd mount.exfat
+permit nopass :wheel cmd umount
+permit nopass :wheel cmd modprobe
+permit nopass :wheel cmd zzz
+permit nopass :wheel cmd pacman
+permit nopass :wheel cmd cryptsetup
+permit setenv { EDITOR } :wheel cmd visudo args
+permit nopass keepenv zachir as zachir
permit nopass keepenv root