diff options
author | Ori Bernstein <ori@eigenstate.org> | 2022-08-03 02:57:22 +0000 |
---|---|---|
committer | Ori Bernstein <ori@eigenstate.org> | 2022-08-03 02:57:22 +0000 |
commit | 8f109ae113215166746b150a5a09b96050e62e52 (patch) | |
tree | c1203d31e72a2da572637b0f296962849df1df51 /sys/man/8 | |
parent | b4b4b6cd631e4627f8e581d20fc70d5d13f4de18 (diff) |
auth(8): specify what gets put into the environemnt with '-s'
Understanding the environment is important for security critical
applications.
Diffstat (limited to 'sys/man/8')
-rw-r--r-- | sys/man/8/auth | 12 |
1 files changed, 10 insertions, 2 deletions
diff --git a/sys/man/8/auth b/sys/man/8/auth index f0c4cd2ac..f53c806ee 100644 --- a/sys/man/8/auth +++ b/sys/man/8/auth @@ -298,8 +298,16 @@ the child namespace; the flag specifies a string of driver characters to keep. The .B -s -flag initializes the namespace to what rc expects, -and passes its arguments unmodified to /bin/rc. +flag initializes the namespace to an environment which includes +.IR /bin , +.IR /srv , +.IR /env , +.IR /rc , +adds the +.I |d +devices, and execs +.IR /bin/rc , +passing all arguments as though rc was invoked directly. .PP .I As executes |