Language improvements.
Submitted by: wblock MFC after: 3 days Differential revision: https://reviews.freebsd.org/D10826
This commit is contained in:
parent
af5147ecaf
commit
9152cb3868
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=320989
@ -309,7 +309,7 @@ The syntax of the direct invocation is
|
|||||||
.Op Ar image arguments
|
.Op Ar image arguments
|
||||||
.Ed
|
.Ed
|
||||||
.Pp
|
.Pp
|
||||||
The options are as follows:
|
The options are:
|
||||||
.Bl -tag -width indent
|
.Bl -tag -width indent
|
||||||
.It Fl f Ar fd
|
.It Fl f Ar fd
|
||||||
File descriptor
|
File descriptor
|
||||||
@ -339,21 +339,22 @@ Ends the
|
|||||||
options.
|
options.
|
||||||
The argument following
|
The argument following
|
||||||
.Fl -
|
.Fl -
|
||||||
is interpreted as the path of binary to execute.
|
is interpreted as the path of the binary to execute.
|
||||||
.El
|
.El
|
||||||
.Pp
|
.Pp
|
||||||
To conform to user expectation to not break some naively restricted
|
In the direct execution mode,
|
||||||
execution environments, in the direct execution mode
|
|
||||||
.Nm
|
.Nm
|
||||||
emulates verification of the binary execute permission
|
emulates verification of the binary execute permission for the
|
||||||
for current user.
|
current user.
|
||||||
|
This is done to avoid breaking user expectations in naively restricted
|
||||||
|
execution environments.
|
||||||
The verification only uses Unix
|
The verification only uses Unix
|
||||||
.Dv DACs ,
|
.Dv DACs ,
|
||||||
ignores
|
ignores
|
||||||
.Dv ACLs
|
.Dv ACLs
|
||||||
and is racy by its nature.
|
and is naturally prone to race conditions.
|
||||||
The environments which rely on such restrictions are weak
|
Environments which rely on such restrictions are weak
|
||||||
and breakable on its own.
|
and breakable on their own.
|
||||||
.Sh FILES
|
.Sh FILES
|
||||||
.Bl -tag -width ".Pa /var/run/ld-elf32.so.hints" -compact
|
.Bl -tag -width ".Pa /var/run/ld-elf32.so.hints" -compact
|
||||||
.It Pa /var/run/ld-elf.so.hints
|
.It Pa /var/run/ld-elf.so.hints
|
||||||
|
Loading…
Reference in New Issue
Block a user