d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

veriexec(8): explain that only a unique prefix is required

Browse Source 
When setting or querying state it is sufficient to
provide only enough of the state name to be unambiguous.
This commit is contained in:
Simon J. Gerraty 2022-02-14 13:52:40 -08:00
parent e510f97b48
commit a8189e9bd4
1 changed files with 15 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
sbin/veriexec/veriexec.8
View File

@ -24,7 +24,7 @@
.\"
.\" $FreeBSD$
.\"
.Dd July 4, 2018
.Dd February 14, 2022
.Dt VERIEXEC 8
.Os
.Sh NAME
@ -101,6 +101,20 @@ unless verified.
.It Ar locked
prevent loading of any more manifests.
.El
.Pp
When setting or querying the state, it is sufficient to provide
a unique prefix of the desired state.
So
.Fl i
.Ar a
or
.Fl z
.Ar e
are sufficient, but
.Fl i
.Ar loc
is the minimum required to avoid confusion with
.Ar loaded .
.Sh MANIFESTS
The manifest contains a mapping of relative pathnames to fingerprints
with optional flags.