doas.conf

# https://github.com/drduh/config/blob/master/doas.conf
# https://man.openbsd.org/doas.conf
permit persist :wheel
permit nopass :wheel cmd cu args -r -s 115200 -l cuaU0
permit nopass :wheel cmd dhclient args em0
permit nopass :wheel cmd disklabel args -h sd0
permit nopass :wheel cmd disklabel args -h sd1
permit nopass :wheel cmd disklabel args -h sd2
permit nopass :wheel cmd fw_update
permit nopass :wheel cmd mount
permit nopass :wheel cmd netstat args -an
permit nopass :wheel cmd pfctl args -s state
permit nopass :wheel cmd pfctl args -f /etc/pf.conf
permit nopass :wheel cmd pkg_add
permit nopass :wheel cmd pkg_check
permit nopass :wheel cmd rcctl args restart dnsmasq
permit nopass :wheel cmd rcctl args restart privoxy
permit nopass :wheel cmd reboot
permit nopass :wheel cmd route args add default 192.168.1.1
permit nopass :wheel cmd route args delete default
permit nopass :wheel cmd sh args /etc/netstart
permit nopass :wheel cmd syspatch
permit nopass :wheel cmd sysupgrade args -s
permit nopass :wheel cmd sysupgrade args -sn
permit nopass :wheel cmd tcpdump args -ni pflog0
permit nopass :wheel cmd tcpdump args -qni pflog0
permit nopass :wheel cmd umount
permit nopass keepenv root