From 94917adb6444101fc7e7414a5073e8bdde1ee6f6 Mon Sep 17 00:00:00 2001
From: Thorsten Kukuk <kukuk@thkukuk.de>
Date: Tue, 19 Oct 2010 15:24:34 +0000
Subject: Relevant BUGIDs:

Purpose of commit: documentation

Commit summary:
---------------

2010-10-19  Thorsten Kukuk  <kukuk@thkukuk.de>

        * modules/pam_env/pam_env.8.xml: Document side effects of
        environment variables in the stack.
        * modules/pam_exec/pam_exec.8.xml: Document that user can
        have controll over the environment.
---
 modules/pam_env/pam_env.8.xml   | 4 ++++
 modules/pam_exec/pam_exec.8.xml | 5 +++++
 2 files changed, 9 insertions(+)

(limited to 'modules')

diff --git a/modules/pam_env/pam_env.8.xml b/modules/pam_env/pam_env.8.xml
index 536cb132..309643fd 100644
--- a/modules/pam_env/pam_env.8.xml
+++ b/modules/pam_env/pam_env.8.xml
@@ -65,6 +65,10 @@
       flag and turn it on or off by setting the <emphasis>readenv</emphasis>
       flag to 1 or 0 respectively.
     </para>
+    <para>
+      Since setting of PAM environment variables can have side effects
+      to other modules, this module should be the last one on the stack.
+    </para>
   </refsect1>
 
   <refsect1 id="pam_env-options">
diff --git a/modules/pam_exec/pam_exec.8.xml b/modules/pam_exec/pam_exec.8.xml
index e58b95f1..0976f67c 100644
--- a/modules/pam_exec/pam_exec.8.xml
+++ b/modules/pam_exec/pam_exec.8.xml
@@ -67,6 +67,11 @@
      <option>close_session</option>.
     </para>
 
+    <para>
+      Commands called by pam_exec need to be aware of that the user
+      can have controll over the environment.
+    </para>
+
   </refsect1>
 
   <refsect1 id="pam_exec-options">
-- 
cgit v1.2.3