commit eeb7412e12bc3415f0a66b5c6c991ec0324b57a8
from: Stefan Sperling <stsp@stsp.name>
date: Thu Jun 01 15:05:33 2023 UTC

document new behaviour of the enable commmand

commit - 6be5baa37f70382742870a86df8a8678e5cb87cc
commit + eeb7412e12bc3415f0a66b5c6c991ec0324b57a8
blob - 071482485706540eb28831f5132fe353a57e3d7e
blob + 787d15e1a68a0af6e807ca37b974ed81c03cb465
--- nsh.8
+++ nsh.8
@@ -418,14 +418,23 @@ nsh(config-p)/hostname myfirewallname.com
 myfirewallname.com(p)/
 .Ed
 .El
+.Pp
 .Tg enable
 .Ic enable
-Start a privileged shell to allow the user run privleged configuration
-commands.
-i.e. enable privileged command shell mode.
-If an enable secret or password is set, the user shall be prompted to enter
-the password to access the privileged shell.
 .Pp
+Start a privileged shell to allow the user to run privileged commands.
+If an enable secret is set, the user shall be prompted to enter
+the secret to access the privileged shell.
+If neccessary,
+.Nm
+then attempts to obtain root privileges.
+Depending on configuration, this step may require the user's password or
+the root password to be entered.
+Root privileges will be obtained via
+.Xr doas 1 ,
+with a fallback to
+.Xr su 1 .
+.Pp
 .Op no
 .Ic enable Ar secret
 .Pp