Clarify that executable has to be a full path
This commit is contained in:
parent
c61746a15b
commit
0c8dc0e6df
|
@ -104,11 +104,13 @@ access:
|
||||||
|
|
||||||
**permit** <executable> <features...>::
|
**permit** <executable> <features...>::
|
||||||
Permits <executable> to use <features> (each feature seperated by a space).
|
Permits <executable> to use <features> (each feature seperated by a space).
|
||||||
<executable> may be * to affect the default policy.
|
<executable> may be * to affect the default policy, or the full path to the
|
||||||
|
executable file.
|
||||||
|
|
||||||
**reject** <executable> <features...>::
|
**reject** <executable> <features...>::
|
||||||
Disallows <executable> from using <features> (each feature seperated by a space).
|
Disallows <executable> from using <features> (each feature seperated by a space).
|
||||||
<executable> may be * to affect the default policy.
|
<executable> may be * to affect the default policy, or the full path to the
|
||||||
|
executable file.
|
||||||
|
|
||||||
Note that policy enforcement requires procfs to be mounted at /proc and the sway
|
Note that policy enforcement requires procfs to be mounted at /proc and the sway
|
||||||
process to be able to access _/proc/[pid]/exe_ (see **procfs(5)** for details on
|
process to be able to access _/proc/[pid]/exe_ (see **procfs(5)** for details on
|
||||||
|
|
Loading…
Reference in a new issue