Fix things like "The <command>setfmac</command> does suchnsuch" by adding

"command" or such when appropriate.

Reviewed by: trhodes
This commit is contained in:
Daniel Harris 2004-06-30 13:14:19 +00:00
parent 56d0bcb976
commit 488a35390a
Notes: svn2git 2020-12-08 03:00:23 +00:00
svn path=/head/; revision=21315

View file

@ -400,9 +400,9 @@
<para>All configuration may be done by use of the
&man.setfmac.8; and &man.setpmac.8; utilities respectively.
The <command>setfmac</command> is used to set
The <command>setfmac</command> command is used to set
<acronym>MAC</acronym> labels on system objects while the
<command>setpmac</command> is used to set the labels on system
<command>setpmac</command> command is used to set the labels on system
subjects. Observe:</para>
<screen>&prompt.root; <userinput>setfmac biba/high test</userinput></screen>
@ -421,10 +421,10 @@
&prompt.root; <userinput>getfmac test</userinput>
test: biba/high</screen>
<para>As can be observed, the <command>setpmac</command>
<para>As can be observed, <command>setpmac</command>
can be used to override the policy's settings by assigning
a different label to the invoked process. The
<command>getpmac</command> is usually used with currently
<command>getpmac</command> utility is usually used with currently
running processes, such as <application>sendmail</application>:
although it takes a process ID in place of
a command the logic is extremely similar. It should be pointed