diff options
| -rw-r--r-- | ChangeLog | 7 | ||||
| -rw-r--r-- | modules/pam_env/pam_env.8.xml | 4 | ||||
| -rw-r--r-- | modules/pam_exec/pam_exec.8.xml | 5 |
3 files changed, 16 insertions, 0 deletions
@@ -1,3 +1,10 @@ +2010-10-19 Thorsten Kukuk <kukuk@thkukuk.de> + + * modules/pam_env/pam_env.8.xml: Document side effects of + environment variables in the stack. + * modules/pam_exec/pam_exec.8.xml: Document that user can + have controll over the environment. + 2010-10-07 Dmitry V. Levin <ldv@altlinux.org> * modules/pam_selinux/pam_selinux.c (verbose_message): Fix format diff --git a/modules/pam_env/pam_env.8.xml b/modules/pam_env/pam_env.8.xml index 536cb132..309643fd 100644 --- a/modules/pam_env/pam_env.8.xml +++ b/modules/pam_env/pam_env.8.xml @@ -65,6 +65,10 @@ flag and turn it on or off by setting the <emphasis>readenv</emphasis> flag to 1 or 0 respectively. </para> + <para> + Since setting of PAM environment variables can have side effects + to other modules, this module should be the last one on the stack. + </para> </refsect1> <refsect1 id="pam_env-options"> diff --git a/modules/pam_exec/pam_exec.8.xml b/modules/pam_exec/pam_exec.8.xml index e58b95f1..0976f67c 100644 --- a/modules/pam_exec/pam_exec.8.xml +++ b/modules/pam_exec/pam_exec.8.xml @@ -67,6 +67,11 @@ <option>close_session</option>. </para> + <para> + Commands called by pam_exec need to be aware of that the user + can have controll over the environment. + </para> + </refsect1> <refsect1 id="pam_exec-options"> |