[src/netbsd-3]: src/sbin/veriexecctl Pull up revision 1.16 (requested by elad...

[tron <tron%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/b90bb8e179af
branches:  netbsd-3
changeset: 576942:b90bb8e179af
user:      tron <tron%NetBSD.org@localhost>
date:      Mon Aug 15 12:41:30 2005 +0000

description:
Pull up revision 1.16 (requested by elad in ticket #655):
Add and document some convenience aliases for commonly required option
combinations.

diffstat:

 sbin/veriexecctl/veriexecctl.8 |  21 +++++++++++++++++----
 1 files changed, 17 insertions(+), 4 deletions(-)

diffs (50 lines):

diff -r 42f768f99b18 -r b90bb8e179af sbin/veriexecctl/veriexecctl.8
--- a/sbin/veriexecctl/veriexecctl.8    Mon Aug 15 12:41:22 2005 +0000
+++ b/sbin/veriexecctl/veriexecctl.8    Mon Aug 15 12:41:30 2005 +0000
@@ -1,4 +1,4 @@
-.\" $NetBSD: veriexecctl.8,v 1.7.2.8 2005/08/12 06:51:16 snj Exp $
+.\" $NetBSD: veriexecctl.8,v 1.7.2.9 2005/08/15 12:41:30 tron Exp $
 .\"
 .\" Copyright (c) 1999
 .\"    Brett Lymn - blymn%baea.com.au@localhost, brett_lymn%yahoo.com.au@localhost
@@ -29,7 +29,7 @@
 .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 .\" SUCH DAMAGE.
 .\"
-.\"    $Id: veriexecctl.8,v 1.7.2.8 2005/08/12 06:51:16 snj Exp $
+.\"    $Id: veriexecctl.8,v 1.7.2.9 2005/08/15 12:41:30 tron Exp $
 .\"
 .Dd August 2, 2005
 .Dt VERIEXECCTL 8
@@ -78,9 +78,9 @@
 The field
 .Em options
 contains the associated options for the file.
-Currently there are three valid options:
+Currently there are seven valid options:
 .Pp
-.Bl -tag -width INDIRECT -compact
+.Bl -tag -width INTERPRETER -compact
 .It Dv DIRECT
 Allow direct execution only.
 .It Dv INDIRECT
@@ -94,6 +94,19 @@
 and are automatically made read only.
 This option may be used to verify shared libraries have not been
 tampered with.
+.It Dv PROGRAM
+An alias for DIRECT, allow direct execution only.
+.It Dv INTERPRETER
+An alias for INDIRECT, the executable may only be used as an interpreter
+for shell scripts.
+.It Dv SCRIPT
+The file is a shell script.
+For correct operation of veriexec, a script must have both FILE and
+DIRECT attributes set.
+This option is a shorthand way of setting the options for correct
+operation of shell scripts.
+.It Dv LIBRARY
+The file is a library, this option is an alias of the FILE option.
 .El
 .Pp
 There must be only one executable/fingerprint pair per line.