clear the password even after a mismatch

[opendoas.git] / doas.1

diff --git a/doas.1 b/doas.1
index 1082c0358d0efd35aec92cd83821b985b912962d..26d63df44aa6647e1a6315a40adf27dd1e27989b 100644 (file)
--- a/doas.1
+++ b/doas.1
@@ -1,4 +1,4 @@
-.\" $OpenBSD: doas.1,v 1.12 2015/07/26 20:47:01 espie Exp $
+.\" $OpenBSD: doas.1,v 1.13 2015/07/26 23:00:15 tedu Exp $

 .\"
 .\"Copyright (c) 2015 Ted Unangst <tedu@openbsd.org>
 .\"
 .\"
 .\"Copyright (c) 2015 Ted Unangst <tedu@openbsd.org>
 .\"


@@ -21,7 +21,7 @@
 .Nd execute commands as another user
 .Sh SYNOPSIS
 .Nm doas
 .Nd execute commands as another user
 .Sh SYNOPSIS
 .Nm doas

-.Op Fl ns
+.Op Fl Lns

 .Op Fl C Ar config
 .Op Fl u Ar user
 .Ar command
 .Op Fl C Ar config
 .Op Fl u Ar user
 .Ar command


@@ -33,7 +33,8 @@ utility executes the given command as another user.
 The
 .Ar command
 argument is mandatory unless
 The
 .Ar command
 argument is mandatory unless

-.Fl C
+.Fl C ,
+.Fl L ,

 or
 .Fl s
 is specified.
 or
 .Fl s
 is specified.


@@ -57,7 +58,11 @@ or
 .Sq deny
 will be printed on standard output, depending on command
 matching results.
 .Sq deny
 will be printed on standard output, depending on command
 matching results.

-In either case, no command is executed.
+No command is executed.
+.It Fl L
+Clear any persisted authorizations from previous invocations,
+then immediately exit.
+No command is executed.

 .It Fl n
 Non interactive mode, fail if
 .Nm
 .It Fl n
 Non interactive mode, fail if
 .Nm


@@ -89,6 +94,7 @@ The password was incorrect.
 The specified command was not found or is not executable.
 .El
 .Sh SEE ALSO
 The specified command was not found or is not executable.
 .El
 .Sh SEE ALSO

+.Xr su 1 ,

 .Xr doas.conf 5
 .Sh HISTORY
 The
 .Xr doas.conf 5
 .Sh HISTORY
 The