diff options
author | Anthony G. Basile <blueness@gentoo.org> | 2011-10-22 18:14:48 -0400 |
---|---|---|
committer | Anthony G. Basile <blueness@gentoo.org> | 2011-10-22 18:14:48 -0400 |
commit | 77ba177174e78c893b1c689a2919e884ad9b7ecb (patch) | |
tree | bb15370568d6ca6b26829d21cc6a5ffd7bf7410f /doc | |
parent | src/paxctl-ng.c: create and copy XT_PAX flags (diff) | |
download | elfix-77ba177174e78c893b1c689a2919e884ad9b7ecb.tar.gz elfix-77ba177174e78c893b1c689a2919e884ad9b7ecb.tar.bz2 elfix-77ba177174e78c893b1c689a2919e884ad9b7ecb.zip |
doc/revdep-pax.pod: tighten up doc language
Diffstat (limited to 'doc')
-rw-r--r-- | doc/fix-gnustack.1 | 2 | ||||
-rwxr-xr-x | doc/make.sh | 6 | ||||
-rw-r--r-- | doc/paxctl-ng.1 | 2 | ||||
-rw-r--r-- | doc/revdep-pax.1 | 33 | ||||
-rw-r--r-- | doc/revdep-pax.pod | 33 |
5 files changed, 37 insertions, 39 deletions
diff --git a/doc/fix-gnustack.1 b/doc/fix-gnustack.1 index 2c813c6..7f7f4c8 100644 --- a/doc/fix-gnustack.1 +++ b/doc/fix-gnustack.1 @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "FIX-GNUSTACK 1" -.TH FIX-GNUSTACK 1 "2011-04-14" "elfix 0.2" "Documentation for elfix" +.TH FIX-GNUSTACK 1 "2011-04-14" "elfix 0.3" "Documentation for elfix" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/doc/make.sh b/doc/make.sh index 78bca35..07af7bd 100755 --- a/doc/make.sh +++ b/doc/make.sh @@ -8,7 +8,7 @@ rm -f fix-gnustack.1 pod2man \ --official \ --section="1" \ - --release="elfix 0.2" \ + --release="elfix 0.3" \ --center="Documentation for elfix" \ --date="2011-04-14" \ fix-gnustack.pod > fix-gnustack.1 @@ -16,7 +16,7 @@ pod2man \ pod2man \ --official \ --section="1" \ - --release="elfix 0.2" \ + --release="elfix 0.3" \ --center="Documentation for elfix" \ --date="2011-08-18" \ paxctl-ng.pod > paxctl-ng.1 @@ -24,7 +24,7 @@ pod2man \ pod2man \ --official \ --section="1" \ - --release="elfix 0.2" \ + --release="elfix 0.3" \ --center="Documentation for elfix" \ --date="2011-10-19" \ revdep-pax.pod > revdep-pax.1 diff --git a/doc/paxctl-ng.1 b/doc/paxctl-ng.1 index 218dde3..1623800 100644 --- a/doc/paxctl-ng.1 +++ b/doc/paxctl-ng.1 @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "PAXCTL-NG 1" -.TH PAXCTL-NG 1 "2011-08-18" "elfix 0.2" "Documentation for elfix" +.TH PAXCTL-NG 1 "2011-08-18" "elfix 0.3" "Documentation for elfix" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/doc/revdep-pax.1 b/doc/revdep-pax.1 index 944a57b..8e2b008 100644 --- a/doc/revdep-pax.1 +++ b/doc/revdep-pax.1 @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "REVDEP-PAX 1" -.TH REVDEP-PAX 1 "2011-10-19" "elfix 0.2" "Documentation for elfix" +.TH REVDEP-PAX 1 "2011-10-19" "elfix 0.3" "Documentation for elfix" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -147,23 +147,22 @@ revdep\-pax \- find mismatching PaX markings between ELF objects and their libra .SH "DESCRIPTION" .IX Header "DESCRIPTION" \&\fBrevdep-pax\fR finds mismatching PaX markings between an \s-1ELF\s0 object and the -libraries that object dynamically links against. When executing an \s-1ELF\s0 binary -that links against libraries, the PaX hardened kernel ignores the library -markings and uses the executable markings for enforcing PaX restrictions. -It is desireable in some circumstances to migrate back the library markings -to the binaries. +libraries which that object dynamically links against. When executing an \s-1ELF\s0 +binary that links against libraries, the PaX hardened kernel ignores the libraries' +markings and uses the executable's markings to enforce PaX restrictions. +It is desireable in some circumstances to reverse migrate a library's markings +to the binaries that link against it. .PP -revdep-pax can do its work by either starting from the object and mapping -forwards to its libraries, or by starting from a library and mapping -backwards to all the objects that link against it. The library can either -be specified by the \s-1SONAME\s0 as it is reported by \fBldd\fR(1), or by the full -path to the \s-1LIBRARY\s0 file. Symbolic links are dereferenced. The user can -optionally scan for all forward mappings on the system (\-f), for all reverse -mappings (\-r), for forward mappings of just one \s-1OBJECT\s0 (\-b), for reverse -mappings of just one \s-1SONAME\s0 (\-s) or one \s-1LIBRARY\s0 (\-l). In verbose mode (\-v), -all mappings are reported, not just mismatching ones, and in mark mode (\-m), -the user is prompted whether to proceed with marking the found object so -its PaX flags match its source. +revdep-pax can either forward migrate PaX markings from an \s-1ELF\s0 object to its +libraries, or reverse migrate from a library to all the objects that link +against it. The library can either be specified by its \s-1SONAME\s0 as it is reported +by \fBldd\fR(1), or by the full path to the \s-1LIBRARY\s0 file. Symbolic links are +dereferenced. The user can optionally scan for all forward mappings on the +system (\-f), for all reverse mappings (\-r), for forward mappings of just one +\&\s-1OBJECT\s0 (\-b), for reverse mappings of just one \s-1SONAME\s0 (\-s) or one \s-1LIBRARY\s0 (\-l). +In verbose mode (\-v), all mappings are reported, not just mismatching ones, +and in mark mode (\-m), the user is prompted whether to proceed with the migration, +so that the PaX flags of the target inherit the flags of the source. .SH "OPTIONS" .IX Header "OPTIONS" .IP "\fB\-f\fR Scan the system for all forward mappings" 4 diff --git a/doc/revdep-pax.pod b/doc/revdep-pax.pod index 6bb08e8..fc46418 100644 --- a/doc/revdep-pax.pod +++ b/doc/revdep-pax.pod @@ -19,23 +19,22 @@ B<revdep-pax> [-h] =head1 DESCRIPTION B<revdep-pax> finds mismatching PaX markings between an ELF object and the -libraries that object dynamically links against. When executing an ELF binary -that links against libraries, the PaX hardened kernel ignores the library -markings and uses the executable markings for enforcing PaX restrictions. -It is desireable in some circumstances to migrate back the library markings -to the binaries. - -revdep-pax can do its work by either starting from the object and mapping -forwards to its libraries, or by starting from a library and mapping -backwards to all the objects that link against it. The library can either -be specified by the SONAME as it is reported by B<ldd>(1), or by the full -path to the LIBRARY file. Symbolic links are dereferenced. The user can -optionally scan for all forward mappings on the system (-f), for all reverse -mappings (-r), for forward mappings of just one OBJECT (-b), for reverse -mappings of just one SONAME (-s) or one LIBRARY (-l). In verbose mode (-v), -all mappings are reported, not just mismatching ones, and in mark mode (-m), -the user is prompted whether to proceed with marking the found object so -its PaX flags match its source. +libraries which that object dynamically links against. When executing an ELF +binary that links against libraries, the PaX hardened kernel ignores the libraries' +markings and uses the executable's markings to enforce PaX restrictions. +It is desireable in some circumstances to reverse migrate a library's markings +to the binaries that link against it. + +revdep-pax can either forward migrate PaX markings from an ELF object to its +libraries, or reverse migrate from a library to all the objects that link +against it. The library can either be specified by its SONAME as it is reported +by B<ldd>(1), or by the full path to the LIBRARY file. Symbolic links are +dereferenced. The user can optionally scan for all forward mappings on the +system (-f), for all reverse mappings (-r), for forward mappings of just one +OBJECT (-b), for reverse mappings of just one SONAME (-s) or one LIBRARY (-l). +In verbose mode (-v), all mappings are reported, not just mismatching ones, +and in mark mode (-m), the user is prompted whether to proceed with the migration, +so that the PaX flags of the target inherit the flags of the source. =head1 OPTIONS |