d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

veriexec(8): explain that only a unique prefix is required

Browse Source 
When setting or querying state it is sufficient to
provide only enough of the state name to be unambiguous.
This commit is contained in:
Simon J. Gerraty 2022-02-14 13:52:40 -08:00
parent e510f97b48
commit a8189e9bd4
1 changed files with 15 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
sbin/veriexec/veriexec.8
View File

@ -24,7 +24,7 @@
.\" .\"
.\" $FreeBSD$ .\" $FreeBSD$
.\" .\"
.Dd July 4, 2018 .Dd February 14, 2022
.Dt VERIEXEC 8 .Dt VERIEXEC 8
.Os .Os
.Sh NAME .Sh NAME
@ -101,6 +101,20 @@ unless verified.
.It Ar locked .It Ar locked
prevent loading of any more manifests. prevent loading of any more manifests.
.El .El
.Pp
When setting or querying the state, it is sufficient to provide
a unique prefix of the desired state.
So
.Fl i
.Ar a
or
.Fl z
.Ar e
are sufficient, but
.Fl i
.Ar loc
is the minimum required to avoid confusion with
.Ar loaded .
.Sh MANIFESTS .Sh MANIFESTS
The manifest contains a mapping of relative pathnames to fingerprints The manifest contains a mapping of relative pathnames to fingerprints
with optional flags. with optional flags.