backout previous. mandoc(4) lies.

This commit is contained in:
itojun 2002-07-31 00:28:02 +00:00
parent 822deb809a
commit 2b8709b902

View File

@ -1,4 +1,4 @@
.\" $NetBSD: systrace.1,v 1.10 2002/07/31 00:26:56 itojun Exp $
.\" $NetBSD: systrace.1,v 1.11 2002/07/31 00:28:02 itojun Exp $
.\" $OpenBSD: systrace.1,v 1.23 2002/07/30 16:27:21 itojun Exp $
.\"
.\" Copyright 2002 Niels Provos <provos@citi.umich.edu>
@ -103,7 +103,7 @@ as
.El
.Ss POLICY
The policy is specified via the following grammar:
.Bd -literal -offset AAA
.Bd -literal -offset 4
filter = expression "then" action errorcode
expression = symbol | "not" expression | "(" expression ")" |
expression "and" expression | expression "or" expression
@ -179,7 +179,7 @@ Evaluates to true if the system call argument is a subpath of
.Pp
Policy entries may contain an appended predicate.
Predicates have the following format:
.Bd -literal -offset AAA
.Bd -literal -offset 4
", if" {"user", "group"} {"=", "!="} string
.Ed
.Pp
@ -198,7 +198,7 @@ user specified policies
An excerpt from a sample
.Xr ls 1
policy might look as follows:
.Bd -literal -offset AAA
.Bd -literal -offset 4
Policy: /bin/ls, Emulation: native
[...]
native-open: filename eq "$HOME" and oflags sub "ro" then permit