summaryrefslogtreecommitdiff
path: root/usr.sbin
diff options
context:
space:
mode:
authoruwe <uwe@NetBSD.org>2023-06-23 10:12:33 +0000
committeruwe <uwe@NetBSD.org>2023-06-23 10:12:33 +0000
commit852146e3a22c221bbcdb7a9f015e3d8d4041d80c (patch)
treecb8ed651e2711024f22c1c641cfb34747e7fc673 /usr.sbin
parent1069dad8d2d29c4f2387601dadd78582e06ac7f8 (diff)
paxctl(8): fix markup
Diffstat (limited to 'usr.sbin')
-rw-r--r--usr.sbin/paxctl/paxctl.831
1 files changed, 16 insertions, 15 deletions
diff --git a/usr.sbin/paxctl/paxctl.8 b/usr.sbin/paxctl/paxctl.8
index eeaccef6884..efcba35d3ad 100644
--- a/usr.sbin/paxctl/paxctl.8
+++ b/usr.sbin/paxctl/paxctl.8
@@ -1,4 +1,4 @@
-.\" $NetBSD: paxctl.8,v 1.18 2023/06/23 06:32:27 wiz Exp $
+.\" $NetBSD: paxctl.8,v 1.19 2023/06/23 10:12:33 uwe Exp $
.\"
.\" Copyright 2006 Elad Efrat <elad@NetBSD.org>
.\" Copyright 2008 Christos Zoulas <christos@NetBSD.org>
@@ -31,7 +31,7 @@
.Nd list and modify PaX flags associated with an ELF program
.Sh SYNOPSIS
.Nm
-.Op Fl 0 | Cm flags
+.Op Fl 0 | Ar flags
.Ar program ...
.Sh DESCRIPTION
The
@@ -48,33 +48,33 @@ If
.Fl 0
option is specified, all PaX flags (including reserved bits) are cleared.
Otherwise, each flag can be prefixed either with a
-.Dq +
+.Sq Cm +
or a
-.Dq -
+.Sq Fl
sign to add or remove the flag, respectively.
.Pp
The following flags are available:
-.Bl -tag -width flag
-.It a
+.Bl -tag -width Fl
+.It Cm a
Explicitly disable PaX ASLR (Address Space Layout Randomization) for
.Ar program .
-.It A
+.It Cm A
Explicitly enable PaX ASLR for
.Ar program .
-.It g
+.It Cm g
Explicitly disable PaX Segvguard for
.Ar program .
-.It G
+.It Cm G
Explicitly enable PaX Segvguard for
.Ar program .
-.It m
+.It Cm m
Explicitly disable PaX MPROTECT
.Po Xr mprotect 2
restrictions
.Pc
for
.Ar program .
-.It M
+.It Cm M
Explicitly enable PaX MPROTECT
.Po Xr mprotect 2
restrictions
@@ -112,11 +112,12 @@ The
.Nm
utility currently uses
.Xr elf 5
-.Dq note
-sections to mark executables as having PaX flags enabled.
+note sections to mark executables as having PaX flags enabled.
This will be done using
.Xr fileassoc 9
in the future so that we can control who does the marking and
not altering the binary file signature.
-(Note this also means that
-at present any flags set do not survive binary file upgrades.)
+.Po
+Note this also means that
+at present any flags set do not survive binary file upgrades
+.Pc .