aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorSimon J. Gerraty <sjg@FreeBSD.org>2022-02-14 21:52:40 +0000
committerSimon J. Gerraty <sjg@FreeBSD.org>2022-02-14 21:54:22 +0000
commita8189e9bd4ddd134f20c0e39a586fddf520cacf7 (patch)
treece88e0c22c734095fc6df6a6195a3beb96b19a20
parente510f97b4814f5ddb8169bf378030a31a99545d9 (diff)
downloadsrc-a8189e9bd4ddd134f20c0e39a586fddf520cacf7.tar.gz
src-a8189e9bd4ddd134f20c0e39a586fddf520cacf7.zip
veriexec(8): explain that only a unique prefix is required
When setting or querying state it is sufficient to provide only enough of the state name to be unambiguous.
-rw-r--r--sbin/veriexec/veriexec.816
1 files changed, 15 insertions, 1 deletions
diff --git a/sbin/veriexec/veriexec.8 b/sbin/veriexec/veriexec.8
index 9a6ebf4037df..161406ae6de2 100644
--- a/sbin/veriexec/veriexec.8
+++ b/sbin/veriexec/veriexec.8
@@ -24,7 +24,7 @@
.\"
.\" $FreeBSD$
.\"
-.Dd July 4, 2018
+.Dd February 14, 2022
.Dt VERIEXEC 8
.Os
.Sh NAME
@@ -101,6 +101,20 @@ unless verified.
.It Ar locked
prevent loading of any more manifests.
.El
+.Pp
+When setting or querying the state, it is sufficient to provide
+a unique prefix of the desired state.
+So
+.Fl i
+.Ar a
+or
+.Fl z
+.Ar e
+are sufficient, but
+.Fl i
+.Ar loc
+is the minimum required to avoid confusion with
+.Ar loaded .
.Sh MANIFESTS
The manifest contains a mapping of relative pathnames to fingerprints
with optional flags.