diff options
Diffstat (limited to 'modules/pam_namespace/pam_namespace.8.xml')
| -rw-r--r-- | modules/pam_namespace/pam_namespace.8.xml | 22 |
1 files changed, 11 insertions, 11 deletions
diff --git a/modules/pam_namespace/pam_namespace.8.xml b/modules/pam_namespace/pam_namespace.8.xml index 32c5359d..0433f0fd 100644 --- a/modules/pam_namespace/pam_namespace.8.xml +++ b/modules/pam_namespace/pam_namespace.8.xml @@ -64,11 +64,11 @@ provides a different instance of itself based on user name, or when using SELinux, user name, security context or both. If an executable script <filename>/etc/security/namespace.init</filename> exists, it - is used to initialize the namespace every time a new instance - directory is setup. The script receives the polyinstantiated - directory path, the instance directory path, flag whether the instance - directory was newly created (0 for no, 1 for yes), and the user name - as its arguments. + is used to initialize the instance directory after it is set up + and mounted on the polyinstantiated directory. The script receives the + polyinstantiated directory path, the instance directory path, flag + whether the instance directory was newly created (0 for no, 1 for yes), + and the user name as its arguments. </para> <para> @@ -197,7 +197,7 @@ <listitem> <para> For certain trusted programs such as newrole, open session - is called from a child process while the parent perfoms + is called from a child process while the parent performs close session and pam end functions. For these commands use this option to instruct pam_close_session to not unmount the bind mounted polyinstantiated directory in the @@ -237,11 +237,11 @@ </variablelist> </refsect1> - <refsect1 id="pam_namespace-services"> - <title>MODULE SERVICES PROVIDED</title> + <refsect1 id="pam_namespace-types"> + <title>MODULE TYPES PROVIDED</title> <para> - The <option>session</option> service is supported. The module must not - be called from multithreaded processes. + Only the <option>session</option> module type is provided. + The module must not be called from multithreaded processes. </para> </refsect1> @@ -365,7 +365,7 @@ <refentrytitle>namespace.conf</refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> - <refentrytitle>pam.d</refentrytitle><manvolnum>8</manvolnum> + <refentrytitle>pam.d</refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> <refentrytitle>mount</refentrytitle><manvolnum>8</manvolnum> |