summaryrefslogtreecommitdiffstats
path: root/share/man/man4/capsicum.4
diff options
context:
space:
mode:
authorpjd <pjd@FreeBSD.org>2013-11-06 23:59:19 +0000
committerpjd <pjd@FreeBSD.org>2013-11-06 23:59:19 +0000
commitc0de7084412665ddb3651dac3f30c12f0f92ffc5 (patch)
tree2a99d80ba54e270e253fd948fc8f688d1ce2b819 /share/man/man4/capsicum.4
parentd11e2d3d82bdc8452c78ec7e9afeb738bf092d4a (diff)
downloadFreeBSD-src-c0de7084412665ddb3651dac3f30c12f0f92ffc5.zip
FreeBSD-src-c0de7084412665ddb3651dac3f30c12f0f92ffc5.tar.gz
Merge r257633:
- Add manual pages for capability rights (rights(4)), cap_rights_init(3) family of functions and cap_rights_get(3) function. - Update remaining Capsicum-related manual pages. Sponsored by: The FreeBSD Foundation Reviewed by: bdrewery Approved by: re (glebius)
Diffstat (limited to 'share/man/man4/capsicum.4')
-rw-r--r--share/man/man4/capsicum.416
1 files changed, 11 insertions, 5 deletions
diff --git a/share/man/man4/capsicum.4 b/share/man/man4/capsicum.4
index b2a157d..3792c6b 100644
--- a/share/man/man4/capsicum.4
+++ b/share/man/man4/capsicum.4
@@ -26,7 +26,7 @@
.\"
.\" $FreeBSD$
.\"
-.Dd September 17, 2013
+.Dd October 19, 2013
.Dt CAPSICUM 4
.Os
.Sh NAME
@@ -58,8 +58,8 @@ memory mappings or file descriptors, may be used.
Once set, the flag is inherited by future children processes, and may not be
cleared.
.It capabilities
-File descriptors that wrap other file descriptors, masking operations that can
-be called on them; for example, a file descriptor returned by
+Limit operations that can be called on file descriptors.
+For example, a file descriptor returned by
.Xr open 2
may be refined using
.Xr cap_rights_limit 2
@@ -69,6 +69,9 @@ and
.Xr write 2
can be called, but not
.Xr fchmod 2 .
+The complete list of the capability rights can be found in the
+.Xr rights 4
+manual page.
.El
.Pp
In some cases,
@@ -88,8 +91,9 @@ associated with file descriptors; described in greater detail in
.El
.Sh SEE ALSO
.Xr cap_enter 2 ,
+.Xr cap_fcntls_limit 2 ,
.Xr cap_getmode 2 ,
-.Xr cap_rights_get 2 ,
+.Xr cap_ioctls_limit 2 ,
.Xr cap_rights_limit 2 ,
.Xr fchmod 2 ,
.Xr open 2 ,
@@ -100,6 +104,7 @@ associated with file descriptors; described in greater detail in
.Xr read 2 ,
.Xr shm_open 2 ,
.Xr write 2 ,
+.Xr cap_rights_get 3 ,
.Xr procdesc 4
.Sh HISTORY
.Nm
@@ -117,7 +122,8 @@ at the University of Cambridge, and
.An "Ben Laurie" Aq benl@FreeBSD.org
and
.An "Kris Kennaway" Aq kris@FreeBSD.org
-at Google, Inc.
+at Google, Inc., and
+.An "Pawel Jakub Dawidek" Aq pawel@dawidek.net .
.Sh BUGS
.Nm
is considered experimental in
OpenPOWER on IntegriCloud