aboutsummaryrefslogtreecommitdiff
path: root/doc
diff options
context:
space:
mode:
authorAnthony G. Basile <blueness@gentoo.org>2011-10-22 18:14:48 -0400
committerAnthony G. Basile <blueness@gentoo.org>2011-10-22 18:14:48 -0400
commit77ba177174e78c893b1c689a2919e884ad9b7ecb (patch)
treebb15370568d6ca6b26829d21cc6a5ffd7bf7410f /doc
parentsrc/paxctl-ng.c: create and copy XT_PAX flags (diff)
downloadelfix-77ba177174e78c893b1c689a2919e884ad9b7ecb.tar.gz
elfix-77ba177174e78c893b1c689a2919e884ad9b7ecb.tar.bz2
elfix-77ba177174e78c893b1c689a2919e884ad9b7ecb.zip
doc/revdep-pax.pod: tighten up doc language
Diffstat (limited to 'doc')
-rw-r--r--doc/fix-gnustack.12
-rwxr-xr-xdoc/make.sh6
-rw-r--r--doc/paxctl-ng.12
-rw-r--r--doc/revdep-pax.133
-rw-r--r--doc/revdep-pax.pod33
5 files changed, 37 insertions, 39 deletions
diff --git a/doc/fix-gnustack.1 b/doc/fix-gnustack.1
index 2c813c6..7f7f4c8 100644
--- a/doc/fix-gnustack.1
+++ b/doc/fix-gnustack.1
@@ -124,7 +124,7 @@
.\" ========================================================================
.\"
.IX Title "FIX-GNUSTACK 1"
-.TH FIX-GNUSTACK 1 "2011-04-14" "elfix 0.2" "Documentation for elfix"
+.TH FIX-GNUSTACK 1 "2011-04-14" "elfix 0.3" "Documentation for elfix"
.\" For nroff, turn off justification. Always turn off hyphenation; it makes
.\" way too many mistakes in technical documents.
.if n .ad l
diff --git a/doc/make.sh b/doc/make.sh
index 78bca35..07af7bd 100755
--- a/doc/make.sh
+++ b/doc/make.sh
@@ -8,7 +8,7 @@ rm -f fix-gnustack.1
pod2man \
--official \
--section="1" \
- --release="elfix 0.2" \
+ --release="elfix 0.3" \
--center="Documentation for elfix" \
--date="2011-04-14" \
fix-gnustack.pod > fix-gnustack.1
@@ -16,7 +16,7 @@ pod2man \
pod2man \
--official \
--section="1" \
- --release="elfix 0.2" \
+ --release="elfix 0.3" \
--center="Documentation for elfix" \
--date="2011-08-18" \
paxctl-ng.pod > paxctl-ng.1
@@ -24,7 +24,7 @@ pod2man \
pod2man \
--official \
--section="1" \
- --release="elfix 0.2" \
+ --release="elfix 0.3" \
--center="Documentation for elfix" \
--date="2011-10-19" \
revdep-pax.pod > revdep-pax.1
diff --git a/doc/paxctl-ng.1 b/doc/paxctl-ng.1
index 218dde3..1623800 100644
--- a/doc/paxctl-ng.1
+++ b/doc/paxctl-ng.1
@@ -124,7 +124,7 @@
.\" ========================================================================
.\"
.IX Title "PAXCTL-NG 1"
-.TH PAXCTL-NG 1 "2011-08-18" "elfix 0.2" "Documentation for elfix"
+.TH PAXCTL-NG 1 "2011-08-18" "elfix 0.3" "Documentation for elfix"
.\" For nroff, turn off justification. Always turn off hyphenation; it makes
.\" way too many mistakes in technical documents.
.if n .ad l
diff --git a/doc/revdep-pax.1 b/doc/revdep-pax.1
index 944a57b..8e2b008 100644
--- a/doc/revdep-pax.1
+++ b/doc/revdep-pax.1
@@ -124,7 +124,7 @@
.\" ========================================================================
.\"
.IX Title "REVDEP-PAX 1"
-.TH REVDEP-PAX 1 "2011-10-19" "elfix 0.2" "Documentation for elfix"
+.TH REVDEP-PAX 1 "2011-10-19" "elfix 0.3" "Documentation for elfix"
.\" For nroff, turn off justification. Always turn off hyphenation; it makes
.\" way too many mistakes in technical documents.
.if n .ad l
@@ -147,23 +147,22 @@ revdep\-pax \- find mismatching PaX markings between ELF objects and their libra
.SH "DESCRIPTION"
.IX Header "DESCRIPTION"
\&\fBrevdep-pax\fR finds mismatching PaX markings between an \s-1ELF\s0 object and the
-libraries that object dynamically links against. When executing an \s-1ELF\s0 binary
-that links against libraries, the PaX hardened kernel ignores the library
-markings and uses the executable markings for enforcing PaX restrictions.
-It is desireable in some circumstances to migrate back the library markings
-to the binaries.
+libraries which that object dynamically links against. When executing an \s-1ELF\s0
+binary that links against libraries, the PaX hardened kernel ignores the libraries'
+markings and uses the executable's markings to enforce PaX restrictions.
+It is desireable in some circumstances to reverse migrate a library's markings
+to the binaries that link against it.
.PP
-revdep-pax can do its work by either starting from the object and mapping
-forwards to its libraries, or by starting from a library and mapping
-backwards to all the objects that link against it. The library can either
-be specified by the \s-1SONAME\s0 as it is reported by \fBldd\fR(1), or by the full
-path to the \s-1LIBRARY\s0 file. Symbolic links are dereferenced. The user can
-optionally scan for all forward mappings on the system (\-f), for all reverse
-mappings (\-r), for forward mappings of just one \s-1OBJECT\s0 (\-b), for reverse
-mappings of just one \s-1SONAME\s0 (\-s) or one \s-1LIBRARY\s0 (\-l). In verbose mode (\-v),
-all mappings are reported, not just mismatching ones, and in mark mode (\-m),
-the user is prompted whether to proceed with marking the found object so
-its PaX flags match its source.
+revdep-pax can either forward migrate PaX markings from an \s-1ELF\s0 object to its
+libraries, or reverse migrate from a library to all the objects that link
+against it. The library can either be specified by its \s-1SONAME\s0 as it is reported
+by \fBldd\fR(1), or by the full path to the \s-1LIBRARY\s0 file. Symbolic links are
+dereferenced. The user can optionally scan for all forward mappings on the
+system (\-f), for all reverse mappings (\-r), for forward mappings of just one
+\&\s-1OBJECT\s0 (\-b), for reverse mappings of just one \s-1SONAME\s0 (\-s) or one \s-1LIBRARY\s0 (\-l).
+In verbose mode (\-v), all mappings are reported, not just mismatching ones,
+and in mark mode (\-m), the user is prompted whether to proceed with the migration,
+so that the PaX flags of the target inherit the flags of the source.
.SH "OPTIONS"
.IX Header "OPTIONS"
.IP "\fB\-f\fR Scan the system for all forward mappings" 4
diff --git a/doc/revdep-pax.pod b/doc/revdep-pax.pod
index 6bb08e8..fc46418 100644
--- a/doc/revdep-pax.pod
+++ b/doc/revdep-pax.pod
@@ -19,23 +19,22 @@ B<revdep-pax> [-h]
=head1 DESCRIPTION
B<revdep-pax> finds mismatching PaX markings between an ELF object and the
-libraries that object dynamically links against. When executing an ELF binary
-that links against libraries, the PaX hardened kernel ignores the library
-markings and uses the executable markings for enforcing PaX restrictions.
-It is desireable in some circumstances to migrate back the library markings
-to the binaries.
-
-revdep-pax can do its work by either starting from the object and mapping
-forwards to its libraries, or by starting from a library and mapping
-backwards to all the objects that link against it. The library can either
-be specified by the SONAME as it is reported by B<ldd>(1), or by the full
-path to the LIBRARY file. Symbolic links are dereferenced. The user can
-optionally scan for all forward mappings on the system (-f), for all reverse
-mappings (-r), for forward mappings of just one OBJECT (-b), for reverse
-mappings of just one SONAME (-s) or one LIBRARY (-l). In verbose mode (-v),
-all mappings are reported, not just mismatching ones, and in mark mode (-m),
-the user is prompted whether to proceed with marking the found object so
-its PaX flags match its source.
+libraries which that object dynamically links against. When executing an ELF
+binary that links against libraries, the PaX hardened kernel ignores the libraries'
+markings and uses the executable's markings to enforce PaX restrictions.
+It is desireable in some circumstances to reverse migrate a library's markings
+to the binaries that link against it.
+
+revdep-pax can either forward migrate PaX markings from an ELF object to its
+libraries, or reverse migrate from a library to all the objects that link
+against it. The library can either be specified by its SONAME as it is reported
+by B<ldd>(1), or by the full path to the LIBRARY file. Symbolic links are
+dereferenced. The user can optionally scan for all forward mappings on the
+system (-f), for all reverse mappings (-r), for forward mappings of just one
+OBJECT (-b), for reverse mappings of just one SONAME (-s) or one LIBRARY (-l).
+In verbose mode (-v), all mappings are reported, not just mismatching ones,
+and in mark mode (-m), the user is prompted whether to proceed with the migration,
+so that the PaX flags of the target inherit the flags of the source.
=head1 OPTIONS