Implement command matching without execution. This just extends

[opendoas.git] / doas.1

diff --git a/doas.1 b/doas.1
index 5220eb59e8e4b1002e8e07c8404db2e1af5b2001..63153c618460b8ce63b3c0ef3e7f17176b5fa5ce 100644 (file)
--- a/doas.1
+++ b/doas.1
@@ -1,4 +1,4 @@
-.\" $OpenBSD: doas.1,v 1.9 2015/07/21 16:12:04 tedu Exp $
+.\" $OpenBSD: doas.1,v 1.10 2015/07/21 17:49:33 jmc Exp $
 .\"
 .\"Copyright (c) 2015 Ted Unangst <tedu@openbsd.org>
 .\"
@@ -30,6 +30,13 @@
 The
 .Nm
 utility executes the given command as another user.
+The
+.Ar command
+argument is mandatory unless
+.Fl C
+or
+.Fl s
+is specified.
 .Pp
 The options are as follows:
 .Bl -tag -width tenletters
@@ -37,6 +44,19 @@ The options are as follows:
 Parse and check the configuration file
 .Ar config ,
 then exit.
+If
+.Ar command
+is supplied,
+.Nm
+will also perform command matching.
+In the latter case
+either
+.Sq permit ,
+.Sq permit nopass
+or
+.Sq deny
+will be printed on standard output, depending on command
+matching results.
 No command is executed.
 .It Fl s
 Execute the shell from