ext4.5: document the verity feature

Signed-off-by: Eric Biggers <ebiggers@google.com>
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
This commit is contained in:
Eric Biggers 2019-09-20 14:29:51 -07:00 committed by Theodore Ts'o
parent 4ecbee2cfd
commit 4cc90574e4

View File

@ -312,6 +312,18 @@ the file system using
and it also speeds up the time required for
.BR mke2fs (8)
to create the file system.
.TP
.B verity
.br
Enables support for verity protected files. Verity files are readonly,
and their data is transparently verified against a Merkle tree hidden
past the end of the file. Using the Merkle tree's root hash, a verity
file can be efficiently authenticated, independent of the file's size.
.IP
This feature is most useful for authenticating important read-only files
on read-write file systems. If the file system itself is read-only,
then using dm-verity to authenticate the entire block device may provide
much better security.
.SH MOUNT OPTIONS
This section describes mount options which are specific to ext2, ext3,
and ext4. Other generic mount options may be used as well; see
@ -774,6 +786,8 @@ ext4, 4.13
ext4, 4.13
.IP "\fBcasefold\fR" 2i
ext4, 5.2
.IP "\fBverity\fR" 2i
ext4, 5.4
.SH SEE ALSO
.BR mke2fs (8),
.BR mke2fs.conf (5),