From a8189e9bd4ddd134f20c0e39a586fddf520cacf7 Mon Sep 17 00:00:00 2001
From: "Simon J. Gerraty" <sjg@FreeBSD.org>
Date: Mon, 14 Feb 2022 13:52:40 -0800
Subject: [PATCH] veriexec(8): explain that only a unique prefix is required

When setting or querying state it is sufficient to
provide only enough of the state name to be unambiguous.
---
 sbin/veriexec/veriexec.8 | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

diff --git a/sbin/veriexec/veriexec.8 b/sbin/veriexec/veriexec.8
index 9a6ebf4037df..161406ae6de2 100644
--- a/sbin/veriexec/veriexec.8
+++ b/sbin/veriexec/veriexec.8
@@ -24,7 +24,7 @@
 .\"
 .\" $FreeBSD$
 .\"
-.Dd July 4, 2018
+.Dd February 14, 2022
 .Dt VERIEXEC 8
 .Os
 .Sh NAME
@@ -101,6 +101,20 @@ unless verified.
 .It Ar locked
 prevent loading of any more manifests.
 .El
+.Pp
+When setting or querying the state, it is sufficient to provide
+a unique prefix of the desired state.
+So
+.Fl i
+.Ar a
+or
+.Fl z
+.Ar e
+are sufficient, but
+.Fl i
+.Ar loc
+is the minimum required to avoid confusion with
+.Ar loaded .
 .Sh MANIFESTS
 The manifest contains a mapping of relative pathnames to fingerprints
 with optional flags.