simplify makefile

[opendoas.git] / doas.1

diff --git a/doas.1 b/doas.1
index 1082c0358d0efd35aec92cd83821b985b912962d..7360be3dc21bf423a05df64293a22d9f28d3a2f1 100644 (file)
--- a/doas.1
+++ b/doas.1
@@ -1,4 +1,4 @@
-.\" $OpenBSD: doas.1,v 1.12 2015/07/26 20:47:01 espie Exp $
+.\" $OpenBSD: doas.1,v 1.13 2015/07/26 23:00:15 tedu Exp $

 .\"
 .\"Copyright (c) 2015 Ted Unangst <tedu@openbsd.org>
 .\"
 .\"
 .\"Copyright (c) 2015 Ted Unangst <tedu@openbsd.org>
 .\"


@@ -21,7 +21,7 @@
 .Nd execute commands as another user
 .Sh SYNOPSIS
 .Nm doas
 .Nd execute commands as another user
 .Sh SYNOPSIS
 .Nm doas

-.Op Fl ns
+.Op Fl Lns

 .Op Fl C Ar config
 .Op Fl u Ar user
 .Ar command
 .Op Fl C Ar config
 .Op Fl u Ar user
 .Ar command


@@ -33,11 +33,37 @@ utility executes the given command as another user.
 The
 .Ar command
 argument is mandatory unless
 The
 .Ar command
 argument is mandatory unless

-.Fl C
+.Fl C ,
+.Fl L ,

 or
 .Fl s
 is specified.
 .Pp
 or
 .Fl s
 is specified.
 .Pp

+The user will be required to authenticate by entering their password,
+unless configured otherwise.
+.Pp
+By default, a new environment is created.
+The variables
+.Ev HOME ,
+.Ev LOGNAME ,
+.Ev PATH ,
+.Ev SHELL ,
+and
+.Ev USER
+and the
+.Xr umask 2
+are set to values appropriate for the target user.
+.Ev DOAS_USER
+is set to the name of the user executing
+.Nm .
+The variables
+.Ev DISPLAY
+and
+.Ev TERM
+are inherited from the current environment.
+This behavior may be modified by the config file.
+The working directory is not changed.
+.Pp

 The options are as follows:
 .Bl -tag -width tenletters
 .It Fl C Ar config
 The options are as follows:
 .Bl -tag -width tenletters
 .It Fl C Ar config


@@ -57,7 +83,11 @@ or
 .Sq deny
 will be printed on standard output, depending on command
 matching results.
 .Sq deny
 will be printed on standard output, depending on command
 matching results.

-In either case, no command is executed.
+No command is executed.
+.It Fl L
+Clear any persisted authorizations from previous invocations,
+then immediately exit.
+No command is executed.

 .It Fl n
 Non interactive mode, fail if
 .Nm
 .It Fl n
 Non interactive mode, fail if
 .Nm


@@ -89,6 +119,7 @@ The password was incorrect.
 The specified command was not found or is not executable.
 .El
 .Sh SEE ALSO
 The specified command was not found or is not executable.
 .El
 .Sh SEE ALSO

+.Xr su 1 ,

 .Xr doas.conf 5
 .Sh HISTORY
 The
 .Xr doas.conf 5
 .Sh HISTORY
 The