Relevant BUGIDs:

Purpose of commit: documentation

Commit summary:
---------------

2010-10-19  Thorsten Kukuk  <kukuk@thkukuk.de>

        * modules/pam_env/pam_env.8.xml: Document side effects of
        environment variables in the stack.
        * modules/pam_exec/pam_exec.8.xml: Document that user can
        have controll over the environment.

diff --git a/ChangeLog b/ChangeLog
index 17336ac6af659da1b4651099c0295c4e81bab98c..14022d936fdfe58b883247f23e7c6ca61d98d5dc 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,10 @@
+2010-10-19  Thorsten Kukuk  <kukuk@thkukuk.de>
+
+       * modules/pam_env/pam_env.8.xml: Document side effects of
+       environment variables in the stack.
+       * modules/pam_exec/pam_exec.8.xml: Document that user can
+       have controll over the environment.
+
 2010-10-07  Dmitry V. Levin  <ldv@altlinux.org>
 
        * modules/pam_selinux/pam_selinux.c (verbose_message): Fix format

diff --git a/modules/pam_env/pam_env.8.xml b/modules/pam_env/pam_env.8.xml
index 536cb132d55d66e62ea90ac02b410b638bbadb9f..309643fd8bfe7c705e19e19e4205375e5c1fc013 100644 (file)
--- a/modules/pam_env/pam_env.8.xml
+++ b/modules/pam_env/pam_env.8.xml
@@ -65,6 +65,10 @@
       flag and turn it on or off by setting the <emphasis>readenv</emphasis>
       flag to 1 or 0 respectively.
     </para>
+    <para>
+      Since setting of PAM environment variables can have side effects
+      to other modules, this module should be the last one on the stack.
+    </para>
   </refsect1>
 
   <refsect1 id="pam_env-options">

diff --git a/modules/pam_exec/pam_exec.8.xml b/modules/pam_exec/pam_exec.8.xml
index e58b95f11980946fd79d77d67a5d2f22922202c6..0976f67c2cca040b42a814688025c1744c5a7564 100644 (file)
--- a/modules/pam_exec/pam_exec.8.xml
+++ b/modules/pam_exec/pam_exec.8.xml
@@ -67,6 +67,11 @@
      <option>close_session</option>.
     </para>
 
+    <para>
+      Commands called by pam_exec need to be aware of that the user
+      can have controll over the environment.
+    </para>
+
   </refsect1>
 
   <refsect1 id="pam_exec-options">