Dear Maintainer,
The example config file found in /usr/share/doc/opendoas/examples contains the
following lines:
----8<------
# Permit members of the sudo group to perform actions as root.
permit :sudo
----8<------
While in itself the comment is true, it's also misleading in that the rule
allows the members of
the sudo group to perform actions as *all users*, not just root. This as per
the doas.conf manual page:
----8<------
as target The target user the running user is allowed to run the command
as. The default is all users.
----8<------
Therefore I suggest to replace the 'as root' part of the comment in question by
'as all users'.