Module Name: src
Committed By: uwe
Date: Fri Jun 23 10:27:12 UTC 2023
Modified Files:
src/usr.sbin/paxctl: paxctl.8
Log Message:
paxctl(8): brush up
Tell the user how to list flags right away, not at the very end.
Do not repeat "for the program" 6 times for each flag letter, it's a
noise by itself already and the italics of .Ar program exacerbates it.
Make the list of flags compact but manually add breaks between the
pairs of enable/disable flags.
To generate a diff of this commit:
cvs rdiff -u -r1.19 -r1.20 src/usr.sbin/paxctl/paxctl.8
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
Modified files:
Index: src/usr.sbin/paxctl/paxctl.8
diff -u src/usr.sbin/paxctl/paxctl.8:1.19 src/usr.sbin/paxctl/paxctl.8:1.20
--- src/usr.sbin/paxctl/paxctl.8:1.19 Fri Jun 23 10:12:33 2023
+++ src/usr.sbin/paxctl/paxctl.8 Fri Jun 23 10:27:12 2023
@@ -1,4 +1,4 @@
-.\" $NetBSD: paxctl.8,v 1.19 2023/06/23 10:12:33 uwe Exp $
+.\" $NetBSD: paxctl.8,v 1.20 2023/06/23 10:27:12 uwe Exp $
.\"
.\" Copyright 2006 Elad Efrat <e...@netbsd.org>
.\" Copyright 2008 Christos Zoulas <chris...@netbsd.org>
@@ -44,9 +44,17 @@ can be found in the
.Xr security 7
manpage.
.Pp
+To view existing flags on a
+.Ar program ,
+execute
+.Nm
+without any flags.
+.Pp
If
.Fl 0
-option is specified, all PaX flags (including reserved bits) are cleared.
+option is specified, all PaX flags
+.Pq including reserved bits
+are cleared.
Otherwise, each flag can be prefixed either with a
.Sq Cm +
or a
@@ -54,38 +62,27 @@ or a
sign to add or remove the flag, respectively.
.Pp
The following flags are available:
-.Bl -tag -width Fl
+.Pp
+.Bl -tag -width Ds -compact
.It Cm a
-Explicitly disable PaX ASLR (Address Space Layout Randomization) for
-.Ar program .
+Explicitly disable PaX ASLR (Address Space Layout Randomization).
.It Cm A
-Explicitly enable PaX ASLR for
-.Ar program .
+Explicitly enable PaX ASLR.
+.Pp
.It Cm g
-Explicitly disable PaX Segvguard for
-.Ar program .
+Explicitly disable PaX Segvguard.
.It Cm G
-Explicitly enable PaX Segvguard for
-.Ar program .
+Explicitly enable PaX Segvguard.
+.Pp
.It Cm m
Explicitly disable PaX MPROTECT
.Po Xr mprotect 2
restrictions
-.Pc
-for
-.Ar program .
+.Pc .
.It Cm M
-Explicitly enable PaX MPROTECT
-.Po Xr mprotect 2
-restrictions
-.Pc
-for
-.Ar program .
+Explicitly enable PaX MPROTECT.
.El
-.Pp
-To view existing flags on a file, execute
-.Nm
-without any flags.
+.
.Sh SEE ALSO
.Xr mprotect 2 ,
.Xr sysctl 3 ,
