Hacker News new | ask | show | jobs
by jacobvosmaer 3568 days ago
I just locked myself out of an OpenBSD 6.0 box by putting the 'persist' keyword in doas.conf.

doas: syntax error at line 1

The word 'persist' does not occur in 'man doas.conf', so maybe this feature is so new it is not in OpenBSD 6.0? Watch out before you try it out yourself.

4 comments

Might want to use the technique in this excerpt from the article in the future before saving doas.conf to /etc. I typically work on my /etc files in a scratch directory and then mv them into /etc

> doas

> The doas command itself has a few options.

> Since we just finished looking at the config file syntax, the -C option can be used to syntax check a new file before installing.

I also just learned this lesson. Assuming you're in wheel group `su -` should still work.
the 'persist' feature is in -current (will be 6.1)
This option only got added in recently. I think it would have been better if this were pointed out in the post. But trying not to sound too snide there's something to be said for checking the man page before copying config off the internet.
Sure, it was my mistake on two counts (not keeping a root session AND blindly changing the config). That does not necessarily mean I am alone in making that mistake so I thought I would try to warn others.