PERFORCE change 77316 for review

Tom Rhodes trhodes at FreeBSD.org
Sun May 22 19:28:46 GMT 2005


http://perforce.freebsd.org/chv.cgi?CH=77316

Change 77316 by trhodes at trhodes_local on 2005/05/22 19:28:41

	Mark up fixes, kill hard sentence breaks.

Affected files ...

.. //depot/projects/trustedbsd/mac/share/man/man4/mac_chkexec.4#3 edit

Differences ...

==== //depot/projects/trustedbsd/mac/share/man/man4/mac_chkexec.4#3 (text+ko) ====

@@ -86,10 +86,13 @@
 .It Va security.mac.chkexec.enable
 Set to zero or one to toggle the policy off or on.
 .It Va security.mac.chkexec.enforce
-Toggle the enforcement of the security policy. While the policy is loaded but
-not enforced, the system is in learning mode. This means that each time an
-objected is executed, the system calculates and stores the checksums for the
-object. This allows system administrators to create their "baseline database"
+Toggle the enforcement of the security policy.
+While the policy is loaded but
+not enforced, the system is in learning mode.
+This means that each time an object is executed,
+the system calculates and stores the checksums for that object.
+This allows system administrators to create their
+.Dq baseline database
 of trusted binaries simply by letting the system run in regular operation.
 .It Va security.mac.chkexec.cache.objmax
 Adjust the cache size.
@@ -98,18 +101,22 @@
 Note that this value should be similar to
 .Dq 1024
 during the
-.Dx
+.Fx
 buildworld process.
 .It Va security.mac.chkexec.algo
-Specify which hashing algorithm to use. Currently md5 and sha1 are
-supported. By default sha1 is used.
+Specify which hashing algorithm to use.
+Currently MD5 and SHA1 are supported.
+By default SHA1 is used.
 .It Va security.mac.chkexec.cache.enable
-Enable or disable the use of the object cache. Disabling the cache results
+Enable or disable the use of the object cache.
+Disabling the cache results
 in system execution and run-time linking performance being degraded.
 .It Va security.mac.chkexec.ignore_untagged
-Specify whether or not un-registered binaries should be exempt. This allows users
-to execute newly created binaries. It is highly recommended that this option
-NOT be enabled.
+Specify whether or not un-registered binaries should be exempt.
+This allows users to execute newly created binaries.
+It is highly recommended that this option
+.Em not
+be enabled.
 .El
 .Sh SEE ALSO
 .Xr mac 4 ,
To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-cvs" in the body of the message



More information about the trustedbsd-cvs mailing list