summaryrefslogtreecommitdiffstats
path: root/lib/libc/sys/cap_enter.2
diff options
context:
space:
mode:
authorpjd <pjd@FreeBSD.org>2013-03-02 00:11:27 +0000
committerpjd <pjd@FreeBSD.org>2013-03-02 00:11:27 +0000
commit24853370053f911de81d645be20801b842a3dda9 (patch)
tree9d80e9daf2d81c1841914be005090b2875ad59a1 /lib/libc/sys/cap_enter.2
parent3e4a1731aa17cbd6fdf9c9def3c5eb9b47353aa1 (diff)
downloadFreeBSD-src-24853370053f911de81d645be20801b842a3dda9.zip
FreeBSD-src-24853370053f911de81d645be20801b842a3dda9.tar.gz
Provide cap_sandboxed(3) function, which is a wrapper around cap_getmode(2)
system call, which has a nice property - it never fails, so it is a bit easier to use. If there is no support for capability mode in the kernel the function will return false (not in a sandbox). If the kernel is compiled with the support for capability mode, the function will return true or false depending if the calling process is in the capability mode sandbox or not respectively. Sponsored by: The FreeBSD Foundation
Diffstat (limited to 'lib/libc/sys/cap_enter.2')
-rw-r--r--lib/libc/sys/cap_enter.21
1 files changed, 1 insertions, 0 deletions
diff --git a/lib/libc/sys/cap_enter.2 b/lib/libc/sys/cap_enter.2
index 5454ec9..c3cefe8 100644
--- a/lib/libc/sys/cap_enter.2
+++ b/lib/libc/sys/cap_enter.2
@@ -90,6 +90,7 @@ acquired rights as possible.
.Sh SEE ALSO
.Xr cap_new 2 ,
.Xr fexecve 2 ,
+.Xr cap_sandboxed 3 ,
.Xr capsicum 4
.Sh HISTORY
Support for capabilities and capabilities mode was developed as part of the
OpenPOWER on IntegriCloud