Be more explicit by stating that the -n flag is linked to the nopass option in doas...

[opendoas.git] / doas.1

diff --git a/doas.1 b/doas.1
index 0dad559bb1d77acd1c5f5a0d395e722a13184269..2f72ca973bee31abcc22f7623efa786fc322086e 100644 (file)
--- a/doas.1
+++ b/doas.1
@@ -39,7 +39,10 @@ or
 .Fl s
 is specified.
 .Pp
-By default, the environment is reset.
+The user will be required to authenticate by entering their password,
+unless configured otherwise.
+.Pp
+By default, a new environment is created.
 The variables
 .Ev HOME ,
 .Ev LOGNAME ,
@@ -47,7 +50,12 @@ The variables
 .Ev SHELL ,
 and
 .Ev USER
+and the
+.Xr umask 2
 are set to values appropriate for the target user.
+.Ev DOAS_USER
+is set to the name of the user executing
+.Nm .
 The variables
 .Ev DISPLAY
 and
@@ -81,9 +89,9 @@ Clear any persisted authorizations from previous invocations,
 then immediately exit.
 No command is executed.
 .It Fl n
-Non interactive mode, fail if
-.Nm
-would prompt for password.
+Non interactive mode, fail if the matching rule doesn't have the
+.Ic nopass
+option.
 .It Fl s
 Execute the shell from
 .Ev SHELL