git: 6d46fd2cbea4 - main - capsicum.4: Add capsicum_helpers and libcasper references
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Fri, 06 Jun 2025 02:38:42 UTC
The branch main has been updated by emaste:
URL: https://cgit.FreeBSD.org/src/commit/?id=6d46fd2cbea43002689ae1a8a0e388e9774da1bc
commit 6d46fd2cbea43002689ae1a8a0e388e9774da1bc
Author: Ed Maste <emaste@FreeBSD.org>
AuthorDate: 2025-06-05 21:22:13 +0000
Commit: Ed Maste <emaste@FreeBSD.org>
CommitDate: 2025-06-06 02:38:27 +0000
capsicum.4: Add capsicum_helpers and libcasper references
These were present in the SEE ALSO section but were not explicitly
mentioned. Add a brief description of both.
Reviewed by: ziaee
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D50707
---
share/man/man4/capsicum.4 | 16 +++++++++++++++-
1 file changed, 15 insertions(+), 1 deletion(-)
diff --git a/share/man/man4/capsicum.4 b/share/man/man4/capsicum.4
index 3c3eab5d798b..6aefae9d6df2 100644
--- a/share/man/man4/capsicum.4
+++ b/share/man/man4/capsicum.4
@@ -24,7 +24,7 @@
.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
.\" SUCH DAMAGE.
.\"
-.Dd January 3, 2024
+.Dd June 5, 2025
.Dt CAPSICUM 4
.Os
.Sh NAME
@@ -101,6 +101,20 @@ restrict access to global namespaces:
Processes can only act upon their own process ID with syscalls such as
.Xr cpuset_setaffinity 2 .
.El
+.Pp
+.Fx
+provides some additional functionality to support application sandboxing that
+is not part of
+.Nm
+itself:
+.Bl -tag -width indent
+.It Xr capsicum_helpers 3
+A set of a inline functions which simplify modifying programs to use
+.Nm .
+.It Xr libcasper 3
+A library that provides services for sandboxed applications, such as operating
+on files specified on a command line or establishing network connections.
+.El
.Sh SEE ALSO
.Xr cap_enter 2 ,
.Xr cap_fcntls_limit 2 ,