From 37956f7289f74bc17547a3e4287eb211dd770ae0 Mon Sep 17 00:00:00 2001 From: bdrewery Date: Tue, 21 Jun 2016 20:20:30 +0000 Subject: MFC r297160,r297196: r297160: Document openat(2) behavior. r297196: Spell out 'system calls'. --- share/man/man4/filemon.4 | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/share/man/man4/filemon.4 b/share/man/man4/filemon.4 index 0d119bf..6ab3e9e 100644 --- a/share/man/man4/filemon.4 +++ b/share/man/man4/filemon.4 @@ -51,7 +51,7 @@ calls. .Pp .Nm is not intended to be a security auditing tool. -Many syscalls are not tracked and binaries of foreign ABI will not be fully +Many system calls are not tracked and binaries of foreign ABI will not be fully audited. It is intended for auditing of processes for the purpose of determining its dependencies in an efficient and easily parsable format. @@ -64,6 +64,9 @@ to handle incremental builds more smartly. System calls are denoted using the following single letters: .Pp .Bl -tag -width indent -compact +.It Ql A +.Xr openat 2 . +The next log entry may be lacking an absolute path or be inaccurate. .It Ql C .Xr chdir 2 .It Ql D @@ -82,9 +85,13 @@ System calls are denoted using the following single letters: .Xr rename 2 .It Ql R .Xr open 2 +or +.Xr openat 2 for read .It Ql W .Xr open 2 +or +.Xr openat 2 for write .It Ql X .Xr _exit 2 -- cgit v1.1