more precisely describe what happens to the environment without keepenv; OK tedu@

[opendoas.git] / doas.conf.5

diff --git a/doas.conf.5 b/doas.conf.5
index 8fd700bd7f6f076c1727a405eb74a69d811df8d9..d4fb35506a38d38d50059fd1715ddb7ab96bc70e 100644 (file)
--- a/doas.conf.5
+++ b/doas.conf.5
@@ -50,10 +50,18 @@ After the user successfully authenticates, do not ask for a password
 again for some time.
 .It Ic keepenv
 The user's environment is maintained.
-The default is to reset the environment, except for the variables
+The default is to retain the variables
 .Ev DISPLAY
 and
-.Ev TERM .
+.Ev TERM
+from the invoking process, reset
+.Ev HOME ,
+.Ev LOGNAME ,
+.Ev PATH ,
+.Ev SHELL ,
+and
+.Ev USER
+as appropriate for the target user, and discard the rest of the environment.
 .It Ic setenv { Oo Ar variable ... Oc Oo Ar variable=value ... Oc Ic }
 In addition to the variables mentioned above, keep the space-separated
 specified variables.