X-Git-Url: https://git.armaanb.net/?a=blobdiff_plain;f=doas.1;h=7360be3dc21bf423a05df64293a22d9f28d3a2f1;hb=b82ffa68a6436ce3f4c4b480bc9c12ac284b0d99;hp=52d846a6aea339f0beb30e548d70c263b598e261;hpb=0697c3f0aabce204786241c6f2e6e217d06d66d7;p=opendoas.git diff --git a/doas.1 b/doas.1 index 52d846a..7360be3 100644 --- a/doas.1 +++ b/doas.1 @@ -1,4 +1,4 @@ -.\" $OpenBSD: doas.1,v 1.11 2015/07/26 17:24:02 zhuk Exp $ +.\" $OpenBSD: doas.1,v 1.13 2015/07/26 23:00:15 tedu Exp $ .\" .\"Copyright (c) 2015 Ted Unangst .\" @@ -21,7 +21,7 @@ .Nd execute commands as another user .Sh SYNOPSIS .Nm doas -.Op Fl ns +.Op Fl Lns .Op Fl C Ar config .Op Fl u Ar user .Ar command @@ -33,11 +33,37 @@ utility executes the given command as another user. The .Ar command argument is mandatory unless -.Fl C +.Fl C , +.Fl L , or .Fl s is specified. .Pp +The user will be required to authenticate by entering their password, +unless configured otherwise. +.Pp +By default, a new environment is created. +The variables +.Ev HOME , +.Ev LOGNAME , +.Ev PATH , +.Ev SHELL , +and +.Ev USER +and the +.Xr umask 2 +are set to values appropriate for the target user. +.Ev DOAS_USER +is set to the name of the user executing +.Nm . +The variables +.Ev DISPLAY +and +.Ev TERM +are inherited from the current environment. +This behavior may be modified by the config file. +The working directory is not changed. +.Pp The options are as follows: .Bl -tag -width tenletters .It Fl C Ar config @@ -58,6 +84,10 @@ or will be printed on standard output, depending on command matching results. No command is executed. +.It Fl L +Clear any persisted authorizations from previous invocations, +then immediately exit. +No command is executed. .It Fl n Non interactive mode, fail if .Nm @@ -86,9 +116,10 @@ The user attempted to run a command which is not permitted. .It The password was incorrect. .It -The actual program is absent or not executable. +The specified command was not found or is not executable. .El .Sh SEE ALSO +.Xr su 1 , .Xr doas.conf 5 .Sh HISTORY The