Aren/NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

backout previous. mandoc(4) lies.

Browse Source
This commit is contained in:
itojun 2002-07-31 00:28:02 +00:00
parent 822deb809a
commit 2b8709b902
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
bin/systrace/systrace.1
View File

@ -1,4 +1,4 @@
.\" $NetBSD: systrace.1,v 1.10 2002/07/31 00:26:56 itojun Exp $ .\" $NetBSD: systrace.1,v 1.11 2002/07/31 00:28:02 itojun Exp $
.\" $OpenBSD: systrace.1,v 1.23 2002/07/30 16:27:21 itojun Exp $ .\" $OpenBSD: systrace.1,v 1.23 2002/07/30 16:27:21 itojun Exp $
.\" .\"
.\" Copyright 2002 Niels Provos <provos@citi.umich.edu> .\" Copyright 2002 Niels Provos <provos@citi.umich.edu>
@ -103,7 +103,7 @@ as
.El .El
.Ss POLICY .Ss POLICY
The policy is specified via the following grammar: The policy is specified via the following grammar:
.Bd -literal -offset AAA .Bd -literal -offset 4
filter = expression "then" action errorcode filter = expression "then" action errorcode
expression = symbol | "not" expression | "(" expression ")" | expression = symbol | "not" expression | "(" expression ")" |
expression "and" expression | expression "or" expression expression "and" expression | expression "or" expression
@ -179,7 +179,7 @@ Evaluates to true if the system call argument is a subpath of
.Pp .Pp
Policy entries may contain an appended predicate. Policy entries may contain an appended predicate.
Predicates have the following format: Predicates have the following format:
.Bd -literal -offset AAA .Bd -literal -offset 4
", if" {"user", "group"} {"=", "!="} string ", if" {"user", "group"} {"=", "!="} string
.Ed .Ed
.Pp .Pp
@ -198,7 +198,7 @@ user specified policies
An excerpt from a sample An excerpt from a sample
.Xr ls 1 .Xr ls 1
policy might look as follows: policy might look as follows:
.Bd -literal -offset AAA .Bd -literal -offset 4
Policy: /bin/ls, Emulation: native Policy: /bin/ls, Emulation: native
[...] [...]
native-open: filename eq "$HOME" and oflags sub "ro" then permit native-open: filename eq "$HOME" and oflags sub "ro" then permit