@lx @lattera Either that user is an alternative login user and so I usually have a password for it, meaning no need to go through root.
Or it's basically a system user and so I log in as root.

What is means is that root has a password, a unique one. While with doas/sudo/pfexec/… you use your own user's password and usually goes with hope that it won't allow privilege escalation.
Follow

@lanodan can i selectively allow commands with doas? i use sudo to reload various services when the script (not running as root) which does letsencrypt refreshes the certs.

Sign in to participate in the conversation
CleverLibre Social

CleverLibre Social is an inclusive social instance for open discussion, learning, and community.
All cultures welcome.
Hate speech and harassment strictly forbidden.