more precisely describe what happens to the environment without keepenv; OK tedu@

[opendoas.git] / doas.conf.5

diff --git a/doas.conf.5 b/doas.conf.5
index 78bb16fe0df8c0fa0788535985071ce050a2a3c8..d4fb35506a38d38d50059fd1715ddb7ab96bc70e 100644 (file)
--- a/doas.conf.5
+++ b/doas.conf.5
@@ -50,16 +50,18 @@ After the user successfully authenticates, do not ask for a password
 again for some time.
 .It Ic keepenv
 The user's environment is maintained.
-The default is to reset the environment, except for the variables
-.Ev DISPLAY ,
+The default is to retain the variables
+.Ev DISPLAY
+and
+.Ev TERM
+from the invoking process, reset
 .Ev HOME ,
 .Ev LOGNAME ,
-.Ev MAIL ,
 .Ev PATH ,
-.Ev TERM ,
-.Ev USER
+.Ev SHELL ,
 and
-.Ev USERNAME .
+.Ev USER
+as appropriate for the target user, and discard the rest of the environment.
 .It Ic setenv { Oo Ar variable ... Oc Oo Ar variable=value ... Oc Ic }
 In addition to the variables mentioned above, keep the space-separated
 specified variables.
@@ -71,7 +73,7 @@ If the first character of
 is a
 .Ql $
 then the value to be set is taken from the existing environment
-variable of the same name.
+variable of the indicated name.
 .El
 .It Ar identity
 The username to match.
@@ -121,7 +123,7 @@ it isn't considered a keyword.
 .Sh FILES
 .Bl -tag -width "/etc/doas.conf"
 .It Pa /etc/doas.conf
-Doas configuration file.
+doas configuration file.
 .El
 .Sh EXAMPLES
 The following example permits user aja to install packages