document systrace related variables

espie@ ok

1 files changed, 16 insertions, 1 deletions

diff --git a/share/man/man7/ports.7 b/share/man/man7/ports.7
index df430b0dc34..351b4a69f9e 100644
--- a/share/man/man7/ports.7
+++ b/share/man/man7/ports.7
@@ -23,7 +23,7 @@
 .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.\" $OpenBSD: ports.7,v 1.35 2003/06/22 13:21:50 sturm Exp $
+.\" $OpenBSD: ports.7,v 1.36 2003/07/28 17:37:11 sturm Exp $
 .\" $FreeBSD: ports.7,v 1.7 1998/06/23 04:38:50 hoek Exp $
 .\"
 .Dd January 25, 1998
@@ -451,6 +451,19 @@ If defined, display verbose output when applying each patch.
 If defined, only operate on a port if it requires interaction.
 .It Ev BATCH
 If defined, only operate on a port if it can be installed 100% automatically.
+.It Ev USE_SYSTRACE
+Set to
+.Sq Yes
+to protect the 
+.Ar configure , build , 
+and
+.Ar fake
+targets with
+.Xr systrace 1 .
+This way it is ensured that ports do not make any network connections
+during build or write outside some well defined directories.
+The filter list is stored in
+.Pa ${PORTSDIR}/infrastructure/db/systrace.filter .
 .El
 .Sh USING A READ-ONLY PORTS TREE
 Select read-write partition(s) that can accommodate working directories, the
@@ -478,6 +491,8 @@ The ports main engine.
 Network configuration defaults.
 .It Pa /usr/ports/infrastructure/db/network.conf
 Local network configuration.
+.It Pa /usr/ports/infrastructure/db/systrace.filter
+Filter list for systrace.
 .It Pa /usr/ports/infrastructure/db/user.list
 List of users and groups created by ports.
 .El