From nobody Fri Apr 14 05:14:46 2023 X-Original-To: dev-commits-src-branches@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4PyPlC3tz9z45R4J; Fri, 14 Apr 2023 05:14:47 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4PyPlC2rMwz3C5p; Fri, 14 Apr 2023 05:14:47 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1681449287; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=lHTTqJo4ENGAXYyH9/tHBV4rip9Xm64VXQrvjn0yjjg=; b=vnnQgYBf8FbDXe4mxCiBQxQsUzVemOZJL05JnrRVZAMyuL3b8lPQra32YJV97Q4amgZZ9N 10OQad5hOnnQMSIdle53yRF5WqbjwH9Du+lAl24yoRowLokFmKtKV1RHVnuATHyMp3Envn 5OP30GGBbynjEu9Mp6EvpqaqHLlvMlVgmrVs5YgBwNaJ5B8khl8Zg/441f1R3r1I5shO0W ANHoO68OkduhWQW3m4CGGW4zbILmu5FFQX16Q5sTJdgvD3wBORz8qZ6EMkrnVFVUTql6ip APUqltZ7UatCpcQWtUdUZWoh7ZgwDwfOties6V74emIbobSmp5Fd5gjqT1bnRQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1681449287; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=lHTTqJo4ENGAXYyH9/tHBV4rip9Xm64VXQrvjn0yjjg=; b=jDc8xmncQepl4BOQRNyIUwmb8DyCpY90qASqMY0NpuApe8CTMTDzVeWsHdgwM0uFDnGXIR G6McxMlyPcgeJ/I9T3Om0V8Oi+xBNHp0Tzk7MMTmJK9vlaOHMnkkW9HwAJDaX1EPTxzYoM gNajyIAgzrVGeJiAm+kibgJE9eMLLnJOoaGmeBX4eF1093dDfelG+JnoWe2q28qla7FkIL VpP5vtArNOWrO41NrYtcECgvQop7PkUFF7ppJulbktaX0wxt2fOWtbAIS9XL+UriB2MSBy Vrb5hGWUiD35136Tl2rv1DAKk1MqWpa75xHERzLwH30nk6IQx8zVHwd5O7rNOw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1681449287; a=rsa-sha256; cv=none; b=SrKsfIIukesgJGYHIILNP7iSiw4SjX2LpntlMTtjG0EKcdm2mRv9BA17Y/S6QljxuCpt+D LC4l3AYmkx0iVa570UXWA/dUj2TtGLmj3tKQ+15pXTp0MLm7+yjxyQm7AMa7kGORv2yVXx mQgIYtCaFnd5C59y+27vWh9jSZtxgki2nUMrgmXelILTSVnHkeQpUJw4ZfwSJ59QyBv6qh U8JTE9fTJoQVSNCkTopHviFwUZUfYcqbJlmmVIdF/bmcd6ZcQ3mE80Vji1tUpMDm907i+n 0J0aRmZaNLAmg9/rIOTNGPn9LLVqJUznywIFpXEp06NqpUBksJDhnyEiRov3Xw== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4PyPlC0clTz1BD5; Fri, 14 Apr 2023 05:14:47 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.16.1/8.16.1) with ESMTP id 33E5EkxA019825; Fri, 14 Apr 2023 05:14:46 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.16.1/8.16.1/Submit) id 33E5EkqC019824; Fri, 14 Apr 2023 05:14:46 GMT (envelope-from git) Date: Fri, 14 Apr 2023 05:14:46 GMT Message-Id: <202304140514.33E5EkqC019824@gitrepo.freebsd.org> To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-branches@FreeBSD.org From: Gordon Bergling Subject: git: 096559d5fb22 - stable/13 - veriexec(8): explain that only a unique prefix is required List-Id: Commits to the stable branches of the FreeBSD src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-branches List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-dev-commits-src-branches@freebsd.org X-BeenThere: dev-commits-src-branches@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: gbe X-Git-Repository: src X-Git-Refname: refs/heads/stable/13 X-Git-Reftype: branch X-Git-Commit: 096559d5fb229e242330457cb2fe3efee7e7bcb8 Auto-Submitted: auto-generated X-ThisMailContainsUnwantedMimeParts: N The branch stable/13 has been updated by gbe: URL: https://cgit.FreeBSD.org/src/commit/?id=096559d5fb229e242330457cb2fe3efee7e7bcb8 commit 096559d5fb229e242330457cb2fe3efee7e7bcb8 Author: Simon J. Gerraty AuthorDate: 2022-02-14 21:52:40 +0000 Commit: Gordon Bergling CommitDate: 2023-04-14 05:14:16 +0000 veriexec(8): explain that only a unique prefix is required When setting or querying state it is sufficient to provide only enough of the state name to be unambiguous. (cherry picked from commit a8189e9bd4ddd134f20c0e39a586fddf520cacf7) --- sbin/veriexec/veriexec.8 | 16 +++++++++++++++- 1 file changed, 15 insertions(+), 1 deletion(-) diff --git a/sbin/veriexec/veriexec.8 b/sbin/veriexec/veriexec.8 index 9a6ebf4037df..161406ae6de2 100644 --- a/sbin/veriexec/veriexec.8 +++ b/sbin/veriexec/veriexec.8 @@ -24,7 +24,7 @@ .\" .\" $FreeBSD$ .\" -.Dd July 4, 2018 +.Dd February 14, 2022 .Dt VERIEXEC 8 .Os .Sh NAME @@ -101,6 +101,20 @@ unless verified. .It Ar locked prevent loading of any more manifests. .El +.Pp +When setting or querying the state, it is sufficient to provide +a unique prefix of the desired state. +So +.Fl i +.Ar a +or +.Fl z +.Ar e +are sufficient, but +.Fl i +.Ar loc +is the minimum required to avoid confusion with +.Ar loaded . .Sh MANIFESTS The manifest contains a mapping of relative pathnames to fingerprints with optional flags.