From: Todd C. Miller <Todd.Miller@sudo.ws>
Date: Fri, 19 Jul 2019 16:38:53 +0000 (-0600)
Subject: Document that PAM session modules are now run with the silent flag.
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=6e0f7166e3b31f446330c081f243a24566095fc6;p=sudo

Document that PAM session modules are now run with the silent flag.
---

diff --git a/doc/sudoers.man.in b/doc/sudoers.man.in
index 3af9cc3fd..8f5f5be71 100644
--- a/doc/sudoers.man.in
+++ b/doc/sudoers.man.in
@@ -25,7 +25,7 @@
 .nr BA @BAMAN@
 .nr LC @LCMAN@
 .nr PS @PSMAN@
-.TH "SUDOERS" "@mansectform@" "July 12, 2019" "Sudo @PACKAGE_VERSION@" "File Formats Manual"
+.TH "SUDOERS" "@mansectform@" "July 19, 2019" "Sudo @PACKAGE_VERSION@" "File Formats Manual"
 .nh
 .if n .ad l
 .SH "NAME"
@@ -2761,6 +2761,17 @@ pam_session
 On systems that use PAM for authentication,
 \fBsudo\fR
 will create a new PAM session for the command to be run in.
+Unless
+\fBsudo\fR
+is given the
+\fB\-i\fR
+or
+\fB\-s\fR
+options, PAM session modules are run with the
+\(lqsilent\(rq
+flag enabled.
+This prevents last login information from being displayed for every
+command on some systems.
 Disabling
 \fIpam_session\fR
 may be needed on older PAM implementations or on operating systems where
diff --git a/doc/sudoers.mdoc.in b/doc/sudoers.mdoc.in
index 8cb4470a4..f2c37b767 100644
--- a/doc/sudoers.mdoc.in
+++ b/doc/sudoers.mdoc.in
@@ -24,7 +24,7 @@
 .nr BA @BAMAN@
 .nr LC @LCMAN@
 .nr PS @PSMAN@
-.Dd July 12, 2019
+.Dd July 19, 2019
 .Dt SUDOERS @mansectform@
 .Os Sudo @PACKAGE_VERSION@
 .Sh NAME
@@ -2598,6 +2598,17 @@ This setting is only supported by version 1.8.28 or higher.
 On systems that use PAM for authentication,
 .Nm sudo
 will create a new PAM session for the command to be run in.
+Unless
+.Nm sudo
+is given the
+.Fl i
+or
+.Fl s
+options, PAM session modules are run with the
+.Dq silent
+flag enabled.
+This prevents last login information from being displayed for every
+command on some systems.
 Disabling
 .Em pam_session
 may be needed on older PAM implementations or on operating systems where