[src/trunk]: src/share/man/man4 Sync with reality.

[elad <elad%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/c24a5c013398
branches:  trunk
changeset: 583373:c24a5c013398
user:      elad <elad%NetBSD.org@localhost>
date:      Tue Aug 02 18:54:53 2005 +0000

description:
Sync with reality.

- We now support multiple entry types and not just one
- We care for kern.veriexec.strict, not securelevel
- Add sysctl(3) to SEE ALSO

diffstat:

 share/man/man4/veriexec.4 |  13 +++++++------
 1 files changed, 7 insertions(+), 6 deletions(-)

diffs (46 lines):

diff -r 0bec85169383 -r c24a5c013398 share/man/man4/veriexec.4
--- a/share/man/man4/veriexec.4 Tue Aug 02 18:06:14 2005 +0000
+++ b/share/man/man4/veriexec.4 Tue Aug 02 18:54:53 2005 +0000
@@ -1,4 +1,4 @@
-.\" $NetBSD: veriexec.4,v 1.6 2005/05/20 19:52:52 elad Exp $
+.\" $NetBSD: veriexec.4,v 1.7 2005/08/02 18:54:53 elad Exp $
 .\"
 .\" Copyright 2005 Elad Efrat <elad%bsd.org.il@localhost>
 .\" Copyright 2005 Brett Lymn <blymn%netbsd.org@localhost>
@@ -26,9 +26,9 @@
 .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 .\" SUCH DAMAGE.
 .\"
-.\"    $Id: veriexec.4,v 1.6 2005/05/20 19:52:52 elad Exp $
+.\"    $Id: veriexec.4,v 1.7 2005/08/02 18:54:53 elad Exp $
 .\"
-.Dd March 24, 2005
+.Dd August 2, 2005
 .Dt VERIEXEC 4
 .Sh NAME
 .Nm veriexec
@@ -78,7 +78,7 @@
 };
 .Ed
 .Pp
-Where type contains the type of access allowed, which may be one of:
+Where type is a bitfield that can be binary-OR'd with one or more of:
 .Bl -tag -width VERIEXEC_INDIRECT
 .It Dv VERIEXEC_DIRECT
 Allow execution of the file if fingerprint matches.
@@ -104,12 +104,13 @@
 .Dv VERIEXEC_TABLESIZE
 and
 .Dv VERIEXEC_LOAD
-are not permitted once the kernel security level has been raised past 0
+are not permitted once the veriexec strict level has been raised past 0
 by setting
-.Dv kern.securelevel
+.Dv kern.veriexec.strict
 using
 .Xr sysctl 8 .
 .Sh SEE ALSO
+.Xr sysctl 3 ,
 .Xr sysctl 8 ,
 .Xr veriexecctl 8
 .Sh NOTES