git: a8189e9bd4dd - main - veriexec(8): explain that only a unique prefix is required
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Mon, 14 Feb 2022 21:54:33 UTC
The branch main has been updated by sjg:
URL: https://cgit.FreeBSD.org/src/commit/?id=a8189e9bd4ddd134f20c0e39a586fddf520cacf7
commit a8189e9bd4ddd134f20c0e39a586fddf520cacf7
Author: Simon J. Gerraty <sjg@FreeBSD.org>
AuthorDate: 2022-02-14 21:52:40 +0000
Commit: Simon J. Gerraty <sjg@FreeBSD.org>
CommitDate: 2022-02-14 21:54:22 +0000
veriexec(8): explain that only a unique prefix is required
When setting or querying state it is sufficient to
provide only enough of the state name to be unambiguous.
---
sbin/veriexec/veriexec.8 | 16 +++++++++++++++-
1 file changed, 15 insertions(+), 1 deletion(-)
diff --git a/sbin/veriexec/veriexec.8 b/sbin/veriexec/veriexec.8
index 9a6ebf4037df..161406ae6de2 100644
--- a/sbin/veriexec/veriexec.8
+++ b/sbin/veriexec/veriexec.8
@@ -24,7 +24,7 @@
.\"
.\" $FreeBSD$
.\"
-.Dd July 4, 2018
+.Dd February 14, 2022
.Dt VERIEXEC 8
.Os
.Sh NAME
@@ -101,6 +101,20 @@ unless verified.
.It Ar locked
prevent loading of any more manifests.
.El
+.Pp
+When setting or querying the state, it is sufficient to provide
+a unique prefix of the desired state.
+So
+.Fl i
+.Ar a
+or
+.Fl z
+.Ar e
+are sufficient, but
+.Fl i
+.Ar loc
+is the minimum required to avoid confusion with
+.Ar loaded .
.Sh MANIFESTS
The manifest contains a mapping of relative pathnames to fingerprints
with optional flags.