--- src/pam_bsdbioapi/pam_bsdbioapi.8 Thu Feb 23 06:15:13 2006 +++ src/pam_bsdbioapi/pam_bsdbioapi.8.orig Sun Dec 10 06:36:31 2006 @@ -36,6 +36,7 @@ .Ar pam_bsdbioapi .Ar bsp-uuid .Ar backend +.Op -s .Op -f birdb-path .Op -m message-file .Sh DESCRIPTION @@ -69,6 +70,12 @@ This option is required. .Pp .Bl -tag -width ".Fl m Ar message-file" +.It Fl s +Fail without prompting the user to swipe finger if the user has not enrolled +yet. +This is useful if only a handful of users has enrolled, but leaks whether the +given user has enrolled, to whomever tries to authenticate as the user (e.g. +an attacker outside). .It Fl f Ar birdb-path Specify an alternative path to the birdb.conf file for backend configuration. The default is /usr/local/etc/birdb.conf