specify that default is deny if no rule matches

diff --git a/doas.conf.5 b/doas.conf.5
index 65d5befad8fce79090527e4b3a062666e921e753..212e0bb573a0f4d3014e383a279ea965cae9cec1 100644 (file)
--- a/doas.conf.5
+++ b/doas.conf.5
@@ -83,6 +83,7 @@ alone means that command should be run without any arguments.
 .El
 .Pp
 The last matching rule determines the action taken.
+If no rule matches, the action is denied.
 .Pp
 Comments can be put anywhere in the file using a hash mark
 .Pq Sq # ,