Clarify that executable has to be a full path

This commit is contained in:
Drew DeVault 2016-12-02 10:32:08 -05:00
parent c61746a15b
commit 0c8dc0e6df

View file

@ -104,11 +104,13 @@ access:
**permit** <executable> <features...>:: **permit** <executable> <features...>::
Permits <executable> to use <features> (each feature seperated by a space). Permits <executable> to use <features> (each feature seperated by a space).
<executable> may be * to affect the default policy. <executable> may be * to affect the default policy, or the full path to the
executable file.
**reject** <executable> <features...>:: **reject** <executable> <features...>::
Disallows <executable> from using <features> (each feature seperated by a space). Disallows <executable> from using <features> (each feature seperated by a space).
<executable> may be * to affect the default policy. <executable> may be * to affect the default policy, or the full path to the
executable file.
Note that policy enforcement requires procfs to be mounted at /proc and the sway Note that policy enforcement requires procfs to be mounted at /proc and the sway
process to be able to access _/proc/[pid]/exe_ (see **procfs(5)** for details on process to be able to access _/proc/[pid]/exe_ (see **procfs(5)** for details on