man: add brief documentation for the (sd-pam) processes created due to PAMName= (#4967)

A follow-up for #4942, adding a brief but more correct explanation of
the processes.
This commit is contained in:
Lennart Poettering 2016-12-29 10:55:27 +01:00 committed by Martin Pitt
parent 2a4e5c629e
commit 9eb484fa40
1 changed files with 11 additions and 8 deletions

View File

@ -859,14 +859,17 @@
<varlistentry> <varlistentry>
<term><varname>PAMName=</varname></term> <term><varname>PAMName=</varname></term>
<listitem><para>Sets the PAM service name to set up a session <listitem><para>Sets the PAM service name to set up a session as. If set, the executed process will be
as. If set, the executed process will be registered as a PAM registered as a PAM session under the specified service name. This is only useful in conjunction with the
session under the specified service name. This is only useful <varname>User=</varname> setting, and is otherwise ignored. If not set, no PAM session will be opened for the
in conjunction with the <varname>User=</varname> setting. If executed processes. See <citerefentry
not set, no PAM session will be opened for the executed project='man-pages'><refentrytitle>pam</refentrytitle><manvolnum>8</manvolnum></citerefentry> for
processes. See details.</para>
<citerefentry project='man-pages'><refentrytitle>pam</refentrytitle><manvolnum>8</manvolnum></citerefentry>
for details.</para></listitem> <para>Note that for each unit making use of this option a PAM session handler process will be maintained as
part of the unit and stays around as long as the unit is active, to ensure that appropriate actions can be
taken when the unit and hence the PAM session terminates. This process is named <literal>(sd-pam)</literal> and
is an immediate child process of the unit's main process.</para></listitem>
</varlistentry> </varlistentry>
<varlistentry> <varlistentry>