more precisely describe what happens to the environment without keepenv; OK tedu@

diff --git a/doas.conf.5 b/doas.conf.5
index c9ea1b83b746665f0697de465789db8989a23852..d4fb35506a38d38d50059fd1715ddb7ab96bc70e 100644 (file)
--- a/doas.conf.5
+++ b/doas.conf.5
@@ -50,18 +50,18 @@ After the user successfully authenticates, do not ask for a password
 again for some time.
 .It Ic keepenv
 The user's environment is maintained.
-The default is to reset the environment, except for the variables
+The default is to retain the variables
 .Ev DISPLAY
 and
-.Ev TERM .
-The variables
+.Ev TERM
+from the invoking process, reset
 .Ev HOME ,
 .Ev LOGNAME ,
 .Ev PATH ,
 .Ev SHELL ,
 and
 .Ev USER
-are always reset.
+as appropriate for the target user, and discard the rest of the environment.
 .It Ic setenv { Oo Ar variable ... Oc Oo Ar variable=value ... Oc Ic }
 In addition to the variables mentioned above, keep the space-separated
 specified variables.