From 025db698803cbd722444ba2745ead9a5c51efcb4 Mon Sep 17 00:00:00 2001
From: schwarze <schwarze>
Date: Wed, 19 Jun 2019 09:55:55 +0000
Subject: [PATCH] more precisely describe what happens to the environment
 without keepenv; OK tedu@

---
 doas.conf.5 | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/doas.conf.5 b/doas.conf.5
index c9ea1b8..d4fb355 100644
--- a/doas.conf.5
+++ b/doas.conf.5
@@ -50,18 +50,18 @@ After the user successfully authenticates, do not ask for a password
 again for some time.
 .It Ic keepenv
 The user's environment is maintained.
-The default is to reset the environment, except for the variables
+The default is to retain the variables
 .Ev DISPLAY
 and
-.Ev TERM .
-The variables
+.Ev TERM
+from the invoking process, reset
 .Ev HOME ,
 .Ev LOGNAME ,
 .Ev PATH ,
 .Ev SHELL ,
 and
 .Ev USER
-are always reset.
+as appropriate for the target user, and discard the rest of the environment.
 .It Ic setenv { Oo Ar variable ... Oc Oo Ar variable=value ... Oc Ic }
 In addition to the variables mentioned above, keep the space-separated
 specified variables.
-- 
2.39.2