summaryrefslogtreecommitdiffstats
path: root/share/man/man9/priv.9
diff options
context:
space:
mode:
authorru <ru@FreeBSD.org>2006-11-06 14:28:09 +0000
committerru <ru@FreeBSD.org>2006-11-06 14:28:09 +0000
commitabbf63751a4c06ea70f38ee56e8ec75bfe8809d3 (patch)
treed65bd69a64a22171a06fa1208226cf974e8ba10a /share/man/man9/priv.9
parent044b6ca4cf7044a861617ddee19423d296c71d7d (diff)
downloadFreeBSD-src-abbf63751a4c06ea70f38ee56e8ec75bfe8809d3.zip
FreeBSD-src-abbf63751a4c06ea70f38ee56e8ec75bfe8809d3.tar.gz
Fix markup.
Diffstat (limited to 'share/man/man9/priv.9')
-rw-r--r--share/man/man9/priv.923
1 files changed, 13 insertions, 10 deletions
diff --git a/share/man/man9/priv.9 b/share/man/man9/priv.9
index 4693769..dc25a4c 100644
--- a/share/man/man9/priv.9
+++ b/share/man/man9/priv.9
@@ -29,7 +29,7 @@
.\" $FreeBSD$
.\"
.Dd August 30, 2006
-.Dt priv 9
+.Dt PRIV 9
.Os
.Sh NAME
.Nm priv
@@ -42,12 +42,12 @@
.Fn priv_check_cred "struct ucred *cred" "int priv" "int flags"
.Sh DESCRIPTION
The
-.Xr priv 9
+.Nm
interfaces check to see if specific system privileges are granted to the
passed thread,
-.Va td ,
+.Fa td ,
or credential,
-.Va cred.
+.Fa cred .
This interface replaces the
.Xr suser 9
privilege checking interface.
@@ -58,11 +58,12 @@ The caller identifies the desired privilege via the
.Fa priv
argument.
Additional access control context may also be passed using the
-.Va flags .
+.Fa flags
+argument.
.Ss Privilege Policies
Privileges are typically granted based on one of two base system policies:
the superuser policy, which grants privilege based on the effective (or
-sometimes real) uid having a value of 0, and the
+sometimes real) UID having a value of 0, and the
.Xr jail 2
policy, which permits only certain privileges to be granted to processes in a
jail.
@@ -86,10 +87,10 @@ intended to be used by device drivers, rather than adding a new
driver-specific privilege.
.Sh RETURN VALUES
Typically, 0 will be returned for success, and
-.Dv EPERM
+.Er EPERM
will be returned on failure.
Most consumers of
-.Xr priv 9
+.Nm
will wish to directly return the error code from a failed privilege check to
user space; a small number will wish to translate it to another error code
appropriate to a specific context.
@@ -110,6 +111,8 @@ failure occured.
.Xr ucred 9
.Sh AUTHORS
The
-.Xr priv 9
-API and implementation were created by Robert Watson under contract to
+.Nm
+API and implementation were created by
+.An Robert Watson
+under contract to
nCircle Network Security, Inc.
OpenPOWER on IntegriCloud